What is the purpose of the risk score, and how is it calculated?  

 What are the possible risk control strategies?

 How do we pick which one to use?