Information Risk Assessments help to identify the threats that an organisation's information assets are exposed to and the vulnerabilities inherent in them, analyse the business impact of security breaches, and identify the existence of controls to minimise such impact. The recommendations will be drawn from the analysis of the gap between acceptable industry standards and business risks. A realistic view of the current state of readiness of the organisation will be provided and an appropriate risk mitigation plan will be prepared.