2-12 Risk Assessment Risk assessment guidelines are as follows: Periodically assess the risk to organizational operations (including mission, functions, image, or reputation), organizational assets, and individuals, resulting from the operation of organizational systems and the associated processing, storage, or transmission of Postal Service information. Scan for vulnerabilities in organizational systems and applications periodically or when new vulnerabilities affecting those systems and applications are identified. Remediate vulnerabilities in accordance with risk assessments.