Becoming a Security Professional – Key Skills for Detecting and Mitigating Risk