A retailer must move 200 stores to a cloud point of sale over internet links in 60 days. The network team proposes an encrypted overlay so stores cut over as circuits arrive. What should the security manager do FIRST?
A. Approve the overlay to keep cutovers on schedule
B. Identify the data flows and requirements the design must meet
C. Require multifactor authentication on every store tunnel
D. Commission a penetration test before the first cutover
(Explain your answer for more points in the comments!)