Security

1. What are the risks to security? (e.g. public API, assets, encryption)
2. Have the assets been identified? (Threat modelling)
3. What is the history of attacks? (Attack trees)
4. Is the data sensitive? (GDPR compliant)

---