TARA (Threat Analysis and Risk Assessment) is the mechanism used to identify threats, assess risk, and define cybersecurity goals and requirements. It’s the point where cybersecurity becomes operational rather than conceptual.