Added Risk User spec change

Added my risk with an action plan. The client decides to change what a user will be responsible for, like giving an Admin Assistant grading privileges.
Added Government/International Regulations Change

Might be too vague.
Also specified the table of contents depth.
Merge pull request #46 from graemesmth/patch-1

Added Risk User spec change
Merge pull request #47 from Contramalgra/patch-2

Added Government/International Regulations Change
Got in Graeme's Photo - Final tweaks
Quick change to Graeme's section