$$ Step $3$ perform a basic risk analysis and assessment within your organisation and identify relevant controls $($from ISO$27002)$ for the top $5$ risks identified. Identify and motivate the top $5$ risks within your organisation. $-$ABC Software Solutions for the Healthcare Industry

Top $5$ Risks:

Data Breach Insider Threats Ransomware Attacks Non$-$compliance with HIPAA System Downtime

Relevant Controls $($ISO$27002)$:

A$\mathrm{.}9$ Access Control

A$\mathrm{.}12$ Operations Security

A$\mathrm{.}14$ System Acquisition, Development, and Maintenance

A$\mathrm{.}18$ Compliance

A$\mathrm{.}16$ Information Security Incident Management$$

$$