Information Security Officer, Risk Assessment Q&A round (60 min) — interview questions