An IT steering committee is preparing to review proposals for projects that implement emerging technologies. In anticipation of the review, the committee should FIRST:

Determining if IT staff can support emerging technologies is an important resource and capability assessment, but understanding the broader enterprise risk implications precedes decisions about internal support.

Emerging technologies often introduce novel and complex risks that can significantly impact an organization's security, compliance, operational, and reputational posture. Therefore, the IT steering committee's initial priority should be to understand these potential risk influences to inform sound decision-making regarding technology adoption and ensure proper risk management.

Requiring a capacity plan and framework review is a detailed planning step that typically follows the initial risk assessment and a preliminary decision to consider the technology for adoption.

While a review of the enterprise risk management framework is relevant, the committee's immediate focus should be on how the *specific emerging technologies* will influence risk, rather than a broad framework review.