What are some of the criteria that can be used to rank security risks? 

 What are the most common security threats?

 What are the most critical? Why?