NIST SP 800-66 Rev 2 RA-LIKELIHOOD: Risk Analysis: Determine the Likelihood of a Threat Exploiting a Vulnerability

Assess likelihood for each threat and vulnerability pairing using a defined scale, considering threat source capability, intent, and historical occurrence.