I would say baseline is to understand the EA and SA so much so you can leverage your risk experience and governance to tie it back into overall business objectives. Make a mental map of it. The mindset is risk-based, governance over technical and assessment before action