How to identify the activities of risk?

can cookies be a threat with respect to security?

U1-8. Explain 3 different process perspective of improving s/w processes.