The Security Verification and Validation service identifies the system’s information assets as well as the most serious threats. From here, the risk level is calculated and a safeguard plan is established with the associated residual risk level.