Security Risk Assessment

Identify threats and weaknesses against the assets that matter, rate the risk and decide whether to treat, accept or transfer it.