To start, it’s as simple as know your assets, know your threats, know your weaknesses.