A Practical Introduction to Security and Risk Management