Discussion

 As you meeting with a client, What are the top 3 points/topics that qualify as an assessor to perform a professional information security assessment? explain with examples