This report reflects the significance of using security risk assessment and business risk assessment for securing information stored in the server of Australian Red Cross Blood Service, a blood donation company. The economic cost that, the blood donation company had to ay include theft of corporate data, theft of personal information, loss in revenue market etc. A detail security risk assessment and a business risk assessment re conducted in this paper.