Identification should include
- consideration of safety standards (e.g., OSHA regulations, use of personal protective equipment [PPE])
- threats to physical security (e.g., bloodborne pathogens, intruders, weather emergencies)
- threats to digital security
- contingency and emergency communication plans (e.g., lockdown procedures).