Pro Suggestion: Once I educate junior security officers, I use the “Shark in the Tank” analogy. A shark can be a hazard. When the shark is in the sealed glass tank therefore you are exterior, the risk is negligible. Evaluation the controls You should assessment the controls you may have https://calvant.com/blog/soc-2-risk-assessment-process-step-by-step-guide-saas