SBD provides detailed risk assessments and helps clients develop risk management plans. Using frameworks such as ISO 17799 or ISO/IEC 27002, we look at ways to cost-effectively mitigate, eliminate, accept, or transfer risks, and recommend appropriate threat prevention, detection, and response strategies. Countermeasures may include hardware, software, policies and procedures, configuration hardening, security awareness training, and the creation of incident response teams.