This article discusses the importance of risk assessment in cybersecurity for universities. It covers critical asset identification, threat identification, and threat assessment. The article also provides a table for critical asset identification and discusses the impact of the top five threats related to university website assets. The references section includes relevant sources for further reading.