An organization is about to start an annual information security assessment. The first step is to identify any changes to business processes that could be relev...