• Understanding and evaluating information security risks
  • Developing strategies for risk mitigation