When designing a Cyber-Physical System (CPS), which of the following should be a security practitioner's...

A risk assessment is the first step in designing a secure CPS, as it helps to identify the threats, vulnerabilities, impacts, and likelihoods of the system. A risk assessment also helps to prioritize the security requirements and controls for the system, based on the risk appetite and tolerance of the organization. Detection, resiliency, and topology are important aspects of CPS security, but they depend on the outcome of the risk assessment. References: CISSP CBK Reference, 5th Edition, Chapter 1, page 29; CISSP All-in-One Exam Guide, 8th Edition, Chapter 1, page 23