Conduct an Event$/$Impact $($Risk$)$ Analysis, as described in the book, Information Security Governance,

by asking a series of Impact$-$related and Event$-$related questions to $2$ to $3$ of your colleagues $($preferably

from middle management$).$ From the responses received, clearly identify a maximum of ten risks. From

these risks, identify, prioritise and motivate the five most important IT$-$ or information$-$related risks.

Provide adequate documentary support to prove the extent of the Event$/$Impact Analysis. As evidence,

provide a manuscript that captures the responses to the Impact$-$related and Event$-$related questions

asked to at least two colleagues $($preferably middle managers$).$