Checklist: ICO Risk Profile Assessment