Added examples of in-scope threats and risks