and i just did a very, very simple methodology here where i just said, you know, what i'm calling the risk point is just the value of the asset times the threat times the vulnerability, a * b * c. it's just a way to rank it.