The purpose of this framework document is to provide guidance for conducting risk assessments for government organizations.