Threat and Risk Assessments:

A TRA examines what an organization has to protect, what it needs to be protected from, what measures are currently in place to reduce possible threats, and what needs to be done to address vulnerabilities.

TRAs involve:

Establishing the scope of the assessment and identifying the employees and assets to be safeguarded;Assessing the risk based on the adequacy of the existing safeguards and vulnerabilities, and implementing supplementary safeguards that will reduce the risk to an acceptable level.