perform a security self assessment

[ilrudie]

• Document Security Self-Assessment.

I think we don't have to address all things from self-assessment, the critical thing is to document the assessment and have a plan in place to tackle issues.