Risks, Controls, and Security : Concepts and Applications