This four step assessment process is based on the premise that by understanding its risks, a community can make smart decisions about how to manage risk, including developing needed capabilities. 

Risk Analysis and Management for Critical Asset Protection ASIS General Security Risk Assessment Guideline Threat and Hazard Identification and Risk Assessment.