Evaluate using risk matrices plotting likelihood (rare to almost certain) against consequences (insignificant to catastrophic). Consider historical data, expert judgment, industry benchmarks, and stakeholder input. Calculate risk scores combining probability and impact ratings for prioritization and control design.
