Charles shares his surprising findings on conducting security and privacy risk assessments, revealing that even without extensive preparation, competent teams can identify significant risks in just a couple of hours. He emphasizes the value of group discussions, which enhance team awareness and understanding of potential problems. While having security experts can be beneficial, it's not essential; the act of assessing risks is far more important than skipping it altogether.
