The identification, assessment, and mitigation of risks associated with user authentication and resource access.