Which of the following MUST be consistent with the established criteria when defining the risk management context as it relates to risk calculation?
Risk is assessed from likelihood and impact, so the formulas and methods used to combine those values must be consistent with the defined risk criteria. Consistent calculation methods ensure that risk ratings can be compared and interpreted reliably across assessments. ISACA defines risk as the combination of an event’s likelihood and impact.
Community Discussion