Ripple Interview Question

How do you conduct a security assessment?