“Evaluate not only existing but also potential threats…”