An organization is assessing its existing risk/reward balance and identifying areas where current controls may be insufficient. They review the sources, likelih...