Make an extensive presentation on cyber security assessment tool, including:

https://www.ffiec.gov/cyberassessmenttool.htm

a. residual risk and maturity of an organization

i. once you do the inherent risk, then you get to the residual risk.

1) This is where the maturity model (above) comes in.

ii. Residual risk:

1) Baseline

2) Evolving

3) Intermediate

4) Advanced

5) Innovative