Threat risk assessment template, What it means in practice Risk