Security Assessment Strategy