You've been assigned your first project: Evaluating our network's security posture. What's the first thing you need to know?