Title: EDP risk analysis and controls justification