This is the practice of analyzing potential threats and determining the likelihood and impact of these threats.