How is the likelihood of a given threat successfully exploiting a given vulnerability estimated? How is the likelihood of a given threat successfully exploiting a given vulnerability estimated? Evaluate the threat source's motivation, opportunity, and methods for conducting such an exploitation. Identify the information system boundaries, resources, and information. Identify and assess the risks to a given environment. Determine the criticality and sensitivity of the system, in terms of its confidentiality, integrity, and availability