Risk Assessment

Only after having established an overview of threats (intent, capability, and opportunity), vulnerabilities, impacts and likelihood, is it then possible to conduct the risk assessment. A risk assessment is not a one-off activity but should be repeated at appropriate intervals to ensure that the risk assessment’s findings are kept up to date.