Security a risk(y) management issue