· Include in a section of the paper a brief discussion of the risk management methodology used to rank order or quantify security risks to ascertain the most serious risks based on the probability of occurrence and impact (e.g. very likely to occur