Perform a risk assessment based on learning and experience in Information management. What risks can be identify? What can be done to address them? Are any of them considered acceptable risks? Why and what will it cost if the risk becomes reality?

Expand on threats and plans to address them. Are your plans for security, both locally and online, sufficient? If not, what else can you do to protect your systems as well as your data?

Will you require training in ethics for employees? How will you respond to or enforce breaches due to employee error or deliberate misbehavior?