We led this workshop, in which participants carried out risk assessments to determine security and privacy policy using the HIPSTER workshop materials. Attendance was 12 participants. All participants engaged fully; the discussions were in depth and worthwhile; and feedback forms expressed satisfaction afterwards with the workshop.