Comment by RandomDistort

Has someone got a guide they can link that is easy enough to understand for service administrators that aren't doing anything complicated?

Also, can I request these risk assessments off companies myself?