Risk Assessment Basics For Control Selection