Identify common risks (weak passwords, outdated software, insecure backups) and recommend fixes.