In IT risk assessment, you identify security risks and evaluate their threat. The assessment will not only plug security holes but also help create a more secure organization by tying IT risk management to enterprise-wide risk management.