If you have never put much thought into managing risk in your organization, a risk assessment is the place to start. It can be an eye-opener for a number of reasons. First, you'll quickly see that no risk management methodology is going to allow your organization to avoid all potential loss. Second, if you have never done an assessment before, you may be shocked to find just how many threats exist to your organization and how vulnerable you are. Third, you may be equally surprised to find that there are likely several actions you can take in the near term, with little or no cash investment, to mitigate some of that downside risk.
