anchor: In addition, there are many aspects of information security, such as risk assessment, policy development, and disaster recovery planning, that require coordinated management attention.
positive: Risk assessment is part of information security.
negative: Risk assessment is part of physical security.