Evaluating the potential impact of identified risks in terms of the organization's goals and objectives.