Senior management suspects possible threats in the IT organization and demands a detailed assessment which will produce a list of risks identified and the finan...