SecurityScorecard Interview Question

How do you identify risk within an account?