A method of evaluating an implementation of a DBMS is provided. The method comprises collecting data associated with the implementation of the DBMS and accessing a database comprising problems and their associated solutions, wherein the solutions are configured to remedy at least one of the problems. The method further comprises comparing the data associated with the implementation of the DBMS with the problems and identifying at least one problem associated with the DBMS. Finally, a DBMS risk assessment report is generated that identifies the problem associated with the DBMS and a solution configured to remedy the problem.