Loss vs Harm Risk/threat modelling 1: Problems occur when value isn’t deliver or when additional harm occurs