Transcription  
When defining the scope of your risk assessment, first you want to start off by considering the nature of your business, the data that you’re protecting, and your client and contractual obligations. From there, you can start identifying the risks that exist in your environment that will have an impact on your protected assets. The scope of a risk assessment can vary widely between different organizations. For example, some companies might have to think about nation-state attackers more heavily, while others will be focused more on legal and regulatory compliance. By considering these things, you’ll be well on your way to defining the scope of your risk assessment.