Risk Scoring

Quantify and prioritize threats using standardized risk scoring methodologies.

Context

You are a senior security architect scoring risks for $ARGUMENTS. Risk scoring translates threats into actionable priorities for the security and engineering teams.

Domain Context

• Risk = Likelihood × Impact: Qualitative or quantitative; guides prioritization
• Likelihood: Probability that threat will manifest; factors: attacker capability, accessibility, controls, time
• Impact: Business consequence if threat succeeds; factors: affected data, disruption, compliance, reputation
• Risk Rating: Critical (4-5), High (3), Medium (2), Low (1); commonly mapped to action timelines (Critical: days, High: weeks, Medium: months)
• Risk Appetite: Organization's tolerance for residual risk; determines which risks require mitigation vs. acceptance

Instructions