An assessment of the likelihood that a threat against a target will be successful. It considers the effectiveness of the overall security infrastructure, the procedures and countermeasures. We then of course can provide the guidance to strengthen the weaknesses.