$1.$ Ensure critical infrastructure sectors and Protection elements have and maintain risk assessmentprocesses to identify and prioritize assets, systems, networks, and functions$\mathrm{.}2.$ Ensure operational activities and critical infrastructure sectors have and maintain appropriate threat,vulnerability, and consequence tools to identify and assess threats, vulnerabilities, andconsequences.