New Tools --- Yes, you are right @Ionia. As @tracy mentioned, Risk assessment is what we should conduct before or during we bring a new digital tools/products to serve the business requirement.

For example, one bank need to advance their online service by introduce the online-banking App. Before lunching this app, we usually do the PenTesting to find the vulnerability or loophole that can be exploited by attacker.

Another example, when we buy in the Coffee Making machine with internet connection capability, we should understand the risk and threat involve with this device and who will in charge of it?

Source author: Phannarith Ou phannarith-ou@mptc.gov.kh