An analysis (similar to a threat model) that evaluates the types, potential severity, and likelihood of harms which may be associated with a given product, service or feature
Commentary:
- A risk assessment may evaluate exposure to economic, legal, or brand damage; it may also evaluate potential harms to persons, as in the case of data breaches, or to human rights in the case of a human rights impact assessment.
- Risk assessments are often paired with treatment plans to mitigate, eliminate or respond to unacceptable risks.