Assigned risk ratings are based upon:
Root cause analysis.
Risk probability and impact assessment.
Expert judgment.
Revised stakeholders' tolerances.
Submit