To increase familiarity and understanding of potential security incidents

To ensure compliance with risk management policies and procedures

To reduce the risk of insider threats that could compromise security practices

To lower the organization's risk appetite and tolerance levels