As a financial services professional, you've probably heard the term " technology risk assessment" before. Depending on the nature of your work, you may actually be required (or strongly encouraged) to perform one by regulatory rules, such as GLBA or FINRA regulations (see FINRA's recent 'Report on Cybersecurity Practices').