Risk Analysis and the Security Survey