ORGANIZATIONAL ASSESSMENT FOR RISK MITIGATION