How to create a CyberSecurity Risk Assessment

So now that you know why you need a CSRA and need to be presenting these to your clients, let's get started on how to actually create those. Really, it comes down to gathering data, and you can use as, as much or as little as needed. There's certain baselines that we recommend that we'll go into. But you want to gather as much information. I use the analogy of the crime scene investigators and the detectives. Your crime scene investigation is the data that you're collecting. The evidence that's at that crime scene, the that is going to tell you the ways that that client or that prospect is most likely to be hacked. You're going to take that information, put it together, and then tell them some stories about what the hackers are going to see. Because really, these days, that's what's going on. The hackers are doing the same things you are doing in that csra. They're getting into that customer's environment. They're poking around before they even know that they're there, gathering that information and figuring out the way that they're going to attack.