The potential for risk posed to IT security goals is never static; instead, it is constantly evolving. While known risks can be reduced by taking appropriate measures, technological advancements are often accompanied by new vulnerabilities and threats. That is why the security of an information network must be reclassified on a regular basis - by conducting new analyses and assessments of all risks.