1.InfoSec audits not conducted:2.Client files left out on the desk overnight3.Inventory control and access control policies not followed4.Record cabinets cannot be locked or are left unlocked.5. Regul

1.InfoSec audits not conducted:

2.Client files left out on the desk overnight

3.Inventory control and access control policies not followed

4.Record cabinets cannot be locked or are left unlocked.

5. Regular Firewall maintenance not conducted

6. Computer always left logged-in

7. Client personal data shared with everyone via email

8. Databases/systems not backed-up 

can you write 3 to 4 lines  threats,risks,countermeasures above every  points