Defines risk sources, asset classes, threats, and asset values. In the Enterprise Risk assessment process, it performs risk identification, risk ratio calculation and reporting operations and their evaluation.