The train of conducting the risk assessment compels the group to catalogue and threat rate all of its services, give consideration to certain threat options of its buyer base, and determine the risks associated with the markets by which the company does business - all achieved to find out how.