A business strategy shifts from local hosting to international SaaS. What should the security manager do first?

1. Buy additional endpoint agents immediately
2. Reuse the local-hosting plan unchanged
3. Reassess strategic security requirements and risk assumptions with affected leaders
4. Measure only historical patch completion