Security risk assessment is a process by which an organization determines the risk of a security incident. A security incident is any event that could potentially cause harm to the organization.