• Risk analysis methods, selecting controls, and dealing with residual risks