In order to allocate resources efficiently and effectively to an enterprise’s identified corruption risks and the associated schemes, one good practice is to rate both the probability that each scheme might occur and the corresponding potential impact of that occurrence. The aim is to prioritise the responses to these corruption risks in a logical format based on a combination of their probability of occurrence and their potential impact should they occur. There is some subjectivity in this assessment, and the ratings will be influenced by the experience and backgrounds of individuals involved in the ratings. A simple qualitative scale could be used to classify each scheme’s probability or potential impact as either (i) high, medium, or low, or (ii) very high, high, medium, low, and very low, or a quantitative scale, with scores applied judiciously to each scheme, could be used.