软考真题
第72题
( ) is not included in Information Security Risk Assessment Process.