The process of identifying potential threats and determining the likelihood and impact of those threats.