RSL 10 - Security risk assessment