Joe, the information security manager, is tasked with calculating risk and selecting controls to protect a new system. He has identified people, environmental c...