Evaluates organizational assets, data, and processes to identify and prioritize cybersecurity, information security, and fraud risks.

Identifies missing or inadequate controls in an organization’s security posture relative to regulations and best practices.