Risk assessments: Surely there has to be an easier way ... Intrum Justitia Case Study: Using SANS 20 Critical Security Controls in a Group Wide Security Assessment Techniques to keep the risk assessment practical Should I use SANS Critical Security Controls in my company's risk assessment?