An evaluation of the threats to an organization’s assets, including physical, cyber, and personnel security, to determine the likelihood and impact of security breaches.