After identifying and performing the preliminary classification of an organization’s information assets, the analysis phase moves on to an examination of the ____________________ facing the organization.