This is a security audit of one such business,focusing on the discovery and risk
analysis process. This paper describes the environment,determines and assesses risks,
and addresses the risks,and addresses the risk was uncertainty,the " We don't know what we don't know" factor. Therefore,
this paper will focus on the discovery and risk analysis process, and provide technical de tails in appendices.