1. A systematic method of identifying the assets of a data processing system, the threats to those assets, and the vulnerability of the system to those threats. 2. In COMSEC (communications security,) an organized method of estimating or calculating the probability of compromise. 3. Synonym risk assessment.