- Provide a high level strategic view of a company’s security posture
- Help protect against known cyber threats to data and intellectual company assets
- Evaluate current risk management processes and assess maturity of each industry defined security domain
- Produce recommendation for security risk reduction