Topics Related to Authorization, Gap Analysis and Risk Reduction: