User Threat Assessment Workflow