Consultation regarding the risks in the IT environment of a department, with recommendations for remediation, safeguards and security improvements.