IS final paper is to assess risk and design security goals and controls for a hypothetical org. Hrmm.