Identify threat$/$vulnerability pairs to determine threat actions that could pose risks to the organization.