What is a security assessment and when should one be done?

“A comprehensive security assessment is a structured evaluation of an organization's or individual's physical, digital, and personnel vulnerabilities. It identifies gaps before an incident occurs rather than responding after one.”