A retailer's data center lease ends in 90 days. Facilities found a cheaper building beside a river with one power feed and wants to sign in two weeks. No site assessment exists. What should the security architect do FIRST?
A. Require a second power feed in the lease terms
B. Assess the site for natural and physical threats before signing
C. Design flood barriers and raised floors into the fit-out
D. Transfer the flood and outage risk through insurance
(Explain your answer for more points in the comments!)