Management measures risk under the enterprise-wide risk policies using qualitative, quantitative or hybrid methods, estimating the likelihood of occurrence and the severity of impact of each identified risk in financial, reputation and other terms including lost revenue, recovery and reconstruction costs, litigation, market share, customer confidence and regulatory consequences, recognising that risks interact and that shared services, infrastructure and customers spread impact, and prioritising the risks by the results.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.