3.1 Understanding the Risk Landscape