Risk Rapid Risk Assessment framework - https://infosec.mozilla.org/guidelines/risk/rapid_risk_assessment.html