Which of the following is used together with risk impact to determine the level of risk?
Risk is typically determined from the adverse impact of an event and its likelihood of occurrence. NIST defines risk as a function of those two factors.
Community Discussion