Problem: When it comes to security what types of risk are associated with positive outcomes and what industries would you expect this type of risks? On the other side what role do you think positive risk should play in an organization's risk assessment?