It examines all risks to a business, inside and out. This helps find weak points in security. Then a plan is made to strengthen those areas. This approach helps companies deal with risks well.