超越对关键资产的威胁的直接后果，并将其置于对组织重要的环境中。识别威胁对关键资产的影响。创建风险评估标准。评估威胁对关键资产的影响。将概率纳入风险分析。 Looking beyond the immediate consequences of the threat to a critical asset and placing it in the context of what is important to the organization. Identify the impact of threats to critical assets. Create risk evaluation criteria. Evaluate the impact of threats to critical assets. Incorporate probability into the risk analysis.