CPPSEC4006A Assess Risks This unit of competency specifies the outcomes required to determine effective security policies and controls. It requires the ability to identify key systems and assets, and the likelihood of threat against each asset. It also requires an ability to calculate the current risk for each asset. CPPSEC4007A Assess Threat This unit of competency specifies the outcomes required to assess current, future and potential threats to identified assets or activities. It requires the ability to undertake an assessment of client operations, identify and analyse potential or existing threats, undertake a consequence analysis and present assessment findings. These units may form part of the licensing requirements for persons engaged in risk and threat assessment operations in those states and territories where these are regulated activities.