Watch this video on YouTube
Mitigating technology risk to acceptable levels should be based PRIMARILY upon: