A comprehensive risk analysis needs to consider the assessment of threats that are specific to software, operating platforms, and environments. No system or technical solution is the same. Applying different threat assessment models provides a greater understanding of risk for the entire organization.