Do you want risk-based security analysis or security risk analysis?