A risk assessment covers deficiencies in documentation, processes and procedures, workflow flaws and vulnerabilities, vendor diligence, and beyond, in addition to internal and external network testing."

Raj Bakhru, CFA and CEO, Aponix Financial Technologists.