Assessment of threats and risk