Risk assessment of a system, considering its vulnerabilities and perceived security threat.