if(trackingNum != null){ } Metrics and Methods for Security Risk Management