This report, prepared by a cybersecurity consultant for Ernst & Young (E&Y) Australia, details the creation of a cybersecurity program for Tender Writing AZ, a commercial organization. The report begins by discussing the importance of risk assessment, its objectives, and limitations. It then moves on to identify critical assets like the website and employee devices, and classifies them based on their vulnerability to online and offline threats. The report identifies the top five threats, including cyber security threats, threats to proprietary software, employee and sales data, and schematics. It then assesses these threats, considering their probability, impact, and ranking. The report concludes by emphasizing the necessity of risk assessment for SMEs and provides recommendations for mitigating the identified risks to ensure the security and growth of the business. The report also includes references and appendices, offering a comprehensive overview of the cybersecurity challenges and solutions for Tender Writing AZ.