In this full conference talk from the O'Reilly Security Conference in New York 2016, Bruce Potter outlines the necessity of risk assessment and presents a pragmatic risk assessment process that you can use immediately to do your own assessment.