A security risk to a company may involve malicious attacks or theft, this is includes physical and digital threats. To mitigate security risks: conduct a cybersecurity risk assessment, create an incident response plan, train the team, monitor and protect the network, enforce the use of strong passwords, install security patches and updates, encrypt and backup data, and don't neglect physical security.