Risk is assessed from two perspectives:
Likelihood
Probability that the event will occur
Impact
Estimate potential loss if event occurs
Types of risk
Inherent
Risk that exists before plans are made to control it
Residual
Risk that is left over after you control