"We can and must provide a rational, cost-effective, and enduring framework using risk management as the underlying basis for security decision making." The Joint Security Commission
http://cryptome.org/jcs.htm
There was nothing rational or cost-effective about invading Iraq.
Can you please explain what they are referring to when they speak of 'asset valuation' in the document?