The process of evaluating potential risks or threats to a person, organization, or property in order to develop a security plan or response strategy.