With threats to sensitive data growing in both number and sophistication every day, organisations cannot afford a scattershot approach to security. Instead, they need to focus their limited IT budgets and resources on the specific vulnerabilities in their unique security posture.

To do this, they need to identify, analyse and prioritise the risks to the confidentiality, integrity or availability of their data or information systems, based on both the likelihood of the event and the level of impact it would have on the business.

To begin your risk assessment, take the steps listed in the following checklist.