Watch this video on YouTube
Mitigating technology risks to acceptable levels should be based PRIMARILY upon: