Risk is managed through understanding of our customer environment. It is made up of the following based on the customer solutions and may include any/all of the following: customer planned usage, device layout, configuration, network topography, and a full architectural understanding of the customer deployment of our solution.
This also includes understanding of how the customer plans to use our solution. We then need to analyze the initial set of likely negative conditions to occur based on the customer planned usage. Next, we need to go into a second level of review to understand the next set of conditions that may occur based on the initial set of negative use cases and the positive use cases for the customer solution.
Testing of the customer environment and useage (positive and negative) results in lower risk. The Risk Scoring file on the home page supports further details.