Why I Recommend a Security Risk Assessment to My Clients