Risk assessment

A process used to identify and evaluate risks and their potential effects. Process of analyzing threats to and vulnerabilities of an information system, and the potential impact resulting from the loss of information or capabilities of a system. This analysis is used as a basis for identifying appropriate and costeffective security countermeasures.