Ask yourself what type of impact would be catastrophic to your operations? What information if compromised or breached would cause damage to employees, customers, or business partners?
What is your level of risk appetite and risk tolerance?
Raising the level of awareness helps reinforce the culture of making informed decisions and understanding the level of risk to the organization.