A methodical approach used to identify potential threats and vulnerabilities in a system or organization.