Written Risk Assessment (314.4(b))

The written risk assessment, required by FTC Safeguarding Customer Information standards at 16 CFR 314.4(b), is a documented analysis that identifies potential threats to personal data, evaluates the likelihood and impact of those threats, and outlines measures the organization will implement to mitigate identified risks.