A risk assessment technique used to identify and assess the risks and controls within the overall context of an organization’s objectives and risk appetite. The RCSA can take the form of a questionnaire or workshop.