A risk assessment is the combined effort of identifying and analyzing potential events that may negatively impact a business. Risk assessments help guide an organization in making rational decisions to improve their security posture and align risk with acceptable tolerance levels.