os7 risk assessment guidance

os7 risk assessment guidance