Risks and vulnerability (SCTY) (Level Four) Conducts business risk and vulnerability assessments and business impact analysis for medium-complexity information systems.