Risk assessment (RA), Understand common business documents to support security, Risk Management