The overall purpose of risk analysis is to identify assets within the organization and their value so that you can then identify the threats to those assets.