Our risk assessment process considers two critical factors: The potential annual impact on the business and the probability of occurrence within the ecosystem on a scale of 1-5 (where 1 denotes insignificant impact/remote and 5 represents the highest impact/ almost certain). The risk scores for each identified risk are derived from the ratings of both impact and likelihood and categorised as Critical, High, Medium and Low