In CompTIA Security+ IT Certification, what is the PRIMARY purpose of conducting an initial assessment?