A Security Risk Assessment identifies the key security controls in your network. The SRA is the critical first step in determining what security investments will yield the most cost-effective return.