Evaluating potential threats to identify vulnerabilities and decide on corresponding countermeasures.