In Certified Cloud Security Engineer, what is the PRIMARY purpose of conducting an initial assessment?