Finding, assessing, and ranking potential threats to a company’s data is an important part of risk management. Based on the potential impact, this method aids in designing solutions to lessen or eliminate risks.