statements that prioritize info risk, identify acceptable risks and identify mechanisms for reducing risks
statements ranking information risks, identifying acceptable security goals, and identifying the mechanisms for achieving these goals.
She creeped back in with her own video camera; what a fighter.