Identifying threats that can adversely impact the business whether these are man-made, technical or natural. The risk
assessment helps categorize these threats and plan for the safeguards to mitigate them.