Part A: - Steps used in risk assessments - The steps used to perform a qualitative risk assessment with a risk matrix - Procedure for assessing a vulnerability - Steps to implement a security control Part B: Discuss the balance of profitability and survivability. Stress the following points: - Risk cannot be eliminated - Effective risk management is not possible without first assessing risks