Assess IT organization, processes, and systems for cybersecurity risks and controls. Provide recommendations to improve business success.