To begin risk assessment, take the following steps: 1.Find all valuable assets across the organization that could be harmed by threats in a way that results in a monetary loss. 2.Identify potential consequences. 3.Identify threats and their level. 4.Identify vulnerabilities and assess the likelihood of their exploitation.