Part 1 - Assessing Identity Risk Guidelines