An Employee Vulnerability Assessment (EVA) identifies the human vulnerabilities and their related risks. Based on NIST standards, our Security Risk Assessment (SRA) assesses administrative, physical, and technical vulnerabilities; identifies the associated risks, and provides recommendations for improvement.