Can you spot the information security risks in your office?