2- MAPPING AND ASSESSING NET RISKS