Suggested headings for a High-level Security and Risk Assessment document:
Distribution
Introduction
Security Life-cycle
Three Basic Concerns of Security
Business Modelling
People Assets
Key Roles and Business Continuity Plan
Information Assets
Types of Information Assets
Backups
Intellectual Property and Software
Infrastructure Assets
Facilities
IT Equipment
Services
Corporate Network
Possible Threats
Next Steps
Appendix A: Information Worksheet