Conduct organizational risk analysis ()