Step 4: Risk Assessment

Identify and analyze information security risks to protect organizational assets