You have some creative freedom with this assignment. I've identified the specifics below that you will need to address. You have been hired to help a small retail company with their risk management program. Below are some specifics about the company: The company consists of 30 employees spread across 3 locations in Denver (USA), Quebec City (Canada), and Nice (France). The company has retail locations in Denver and Nice along with an online presence (serving the US, Canada, and Europe). A small product design team is located in Quebec City. The three locations are connected to each other via VPN connections using the Internet. The main hardware (very small data center) is located in the Denver office. They do not currently have a backup/redundant data center. The company currently has 2 full time IT professionals (Denver and Nice). These professionals would be responsible for managing the company's IT risk management program. The company is required to comply with PCI-DSS, California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), and the Personal Information Protection and Electronic Documents Act (PIPEDA)