A security risk assessment assesses, identifies, and implements important security controls. It focuses on preventing security defects and vulnerabilities. Carrying out a risk assessment shows us what defenses are needed to prevent burglars and unwanted intruders from gaining access to a business.