It is used to forecast any possible risks that may arise within the organization in terms of assets usage, policy weakness, and so on. The impact would be in terms of financial loss, any critical data loss, and other concerns.