Step 4: Risk Assessment
Identify and analyze information security risks to protect organizational assets