Risk Assessment and building the framework of the organization on that basis is critical to the organizations ability to identifying the risks and assessing its severity and impact