Duty of Care Risk Analysis (DoCRA). A quick review how communications organizations can use Duty of Care Risk Analysis to establish reasonable risk and appropriate security controls. Define your mission, objectives, and obligations to determine what is reasonable security.