Why and How to Do a New Security Risk Assessment Hero