SRA 311: Risk Analysis in a Security Context