Results of identification and analysis support conclusions about whether a risk is acceptable or needs treatment, how it ranks against objectives and thresholds, and treatment priorities. A risk can be tolerated for a limited period, so the way temporary tolerance is granted, and later revisited, needs to be clear. Priority often rests on a combined consequence and likelihood displayed in a matrix, with known limitations, and other factors may be weighed: maximum or expected consequences, control effectiveness, qualitative event characteristics, stakeholder views, cost and practicability of further treatment and interactions between risks. After treatment decisions the assessment may be repeated to check treatments have not created risk and residual risk is within appetite.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.