Risk-First Analysis Framework
Really, a page for this?
Also, imagining dependencies where there are none, certs and proxies for example.