security activities based on the evolution of the threat environment, and we consider several factors that include the likelihood a given risk will come to fruition, applicability to our technology environment, the mitigation value of various control options, and the most effective application of both our human and technology resources.