A08 – Conceptual framework – Evaluate and address threats