A retail store owner reports frequent shoplifting but has no existing security measures.Which assessment step should a security salesperson perform FIRST?