Categories
Vulnerabilities
Potential Incident
Controls
People
Social Engineering
Breach of data/Personal Identifiable Information
Proper training, policies, and access control permissions
Process
Technology