Risk assessment should cover personnel, as well as technical support such as firewalls, secure operating systems and networks, and antivirus protection.

The statement is: True.

Explanation:

Risk assessment involves all the steps Information Technology (IT) companies take to safeguard the data of their organizations. Risk assessment implies training personnel to comply with confidentiality guidelines and securing the software information through anti-malware, firewall, and all other network security systems.