Lesson 3.1: The architecture of the risk-based approach - The Security and AI Institute