The first step the project manager should take to gather customer requirements for an information security project is to conduct a stakeholder analysis. A stakeholder analysis is a technique that helps identify the key stakeholders, their needs, expectations, interests, and influence on the project. By conducting a stakeholder analysis, the project manager can understand how regional policies may affect the customer requirements, such as legal, regulatory, cultural, or ethical factors. A stakeholder analysis can also help the project manager prioritize the requirements and plan the communication and engagement strategies with the stakeholders. References: = PMBOKGuide, Sixth Edition, pages 513-515; A 6-step guide to requirements gathering for project success, Step 1: Assign roles.