Risk scoring takes place by multiplying the likelihood score with the Impact
score. E.g. If the likelihood for risk X occurring is 3 and the impact is 2, then the
risk score for risk X is 3x2=6 .
There are three risk scores that are assigned to each risk.
• Unmitigated risk score: The level of risk an activity would place if there
were no mitigations in place
• Mitigated risk score: The level of risk remaining aƜer existing mitigations
are accounted for.
• Target risk core: The risk score aƜer any existing and ongoing mitigations
are applied.
Can you assign an Unmitigated Risk Score to the risks you
identified?