How many critical components must commanders use to determine which assets require the most protection and where future expenditures are required to minimize the risk of attack or lessen the severity of the outcome of an attack?