Proven IT interview question

Explain your process for performing discovery on a client's security program.