9 / 10
(  ) is not included in Information Security Risk Assessment Process.