Scaling Down Risk: Managing Your Security Portfolio