. . "It also means identifying who is at risk, such as employees or customers." . . .