Risk Identification Assessment In Business: Privacy Policies And Security Procedures