This three-step process used by U.S. armed forces can identify, analyze and mitigate threats to an organization.