The idea of risk analysis is not to avoid or completely mitigate risk, but to give a sense of the level of risk and probability of success or failure. Risk can be split into threats and vulnerabilities, some of which may not be worth accepting due to low payoff.