Risk assessment should cover all the processes and systems included in an organization. This means this includes also the technical support including firewalls, secure operating systems and networks, and antivirus protection. Risk is always present and inevitable in every way so it is important to anticipate and make early detections to counter with actions as soon as one can.