In terms of ICS/SCADA risk management and auditing, demonstrate how to use your knowledge of the risk as function of M, AV, T, and V. That is R = f (M, AV, T, V). Where: R - risk, M - mission importance, AV - asset values, T - threats, V - vulnerabilities. "Integrity Monitoring" and "Data Management and Records Retention" questions and post to the Wiki your answers so that we can share the learning experience: What do you feel are the most important elements of successfully monitoring? Can you provide some examples of successful logging and data retention schedule? Skills: