sentence1: In addition, there are many aspects of information security, such as risk assessment, policy development, and disaster recovery planning, that require coordinated management attention.
sentence2: Risk assessment is part of physical security.