I have to add provide a draft of a risk assessment for a small EU project. As I've never done this, I struggle with identifying assets or vulnerabilities. I'm aware of very general lists, but I wonder how relevant it is to point out that fire is a danger for servers (especially as we don't have any information about hosting yet)? Shouldn't it be more specific for our web application?
What would probably help me a lot is an example. Does anyone know where to find one?
