Part 3 In any organisation there are a number of compliance, configuration and vulnerabilities that create risk. How these are identified can be down to the skill levels of your IT staff, the compliance risk management software your organisation uses, how quickly your hardware and software deploy updates and patches.