The preliminary steps to security planning include all of the following EXCEPT which of the following? 

Answer options:

A. Establish objectives.
B. List planning assumptions.
C. Establish a security audit function.
D. Determine alternate courses of action

C

The keyword within the question is: preliminary This means that you are starting your effort,you cannot audit if your infrastructure is not even in place. Reference used for this question: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.