The PRIMARY purpose of a periodic threat and risk assessment report to senior management is to communicate the: