Does the organization have any information that, if exposed, would cause our customers to lose confidence in the organization? For example:

• Retail: Loss of payment card data
• Government: Loss of PII information

Does your organization have any information that, if exposed, could potentially severely impact revenue? For example:

• Government contractor: Loss of government customer information
• Food processor: Loss of proprietary formulas

Questions for the business manager:

• Is there information that, if lost, would cause you to lose your job?
• Is there any information that your business unit requires to function? Without this information your business unit will stop functioning.
• Is there any specific information that keeps you awake at night?