GRIMM: A Tailored Approach to M&E Security and Risk Assessments