1. In lieu of a risk assessment, what should a small company do to assess its security posture if a risk assessment is not financially practical?

2. Explain the key roles you believe a risk assessment play in the overall risk management program of an organization.

3. Explain your understanding between a qualitative and quantitative risk assessment.

Please Explain in detail.