Initiating discussions on information security risks with business managers and conducting defined risk assessment procedures.
We are initiating discussions about IT risks with managers, since it is the biggest threat our business faces.