Problem
Provide a description of the risk assessment fundamentals including how to identify inherent risks, how to rate those risks (e.g., high, medium, or low), how controls are identified, how the control effectiveness is rated and the formula for determining residual risks.