The purpose of a critical infrastructure risk management program is to do the following for each of those assets: