In Vulnerability Assessment & Management, what is the FIRST step a CCD professional should take when encountering a new case or situation?