revision of the threats, assumptions, organizational policies