When evaluating your cybersecurity health, always start with a risk assessment. There are so many different attacks and prevention mechanisms to consider, that you may not know which one is the most important to fix. It is important to have standards and frameworks to follow. However, frameworks can be subjective as not all organisations are the same. You cannot apply a one-size-fits-all approach when needs in terms of business processes, functions, culture, and risk appetite differ. Brad Thomas asked Dr. David Day to share his thoughts on the importance of doing a risk assessment. Take a listen.