A risk analysis is useful to $$

Identify security threats

Identify which employees should have access to data

Establish password controls

Establish audit controls