We perform a systematic analysis and evaluation of the technical and business risks associated with either proposed information technology solutions or existing implementations.

The results of a typical risk assessment include the identification of control risks (such as policies, standards, procedures, and system improvements) to eliminate or minimize the risks identified.