These can help identify the various information assets that could be affected by a cyber attack and the various risks that could affect them
Risk assessment vendors
- https://cloudsecurityalliance.org/
- https://www.knowbe4.com/
- https://www.prevalent.net/
- https://www.bitsight.com/
- https://www.mimecast.com/