Risk Calculation

Definitions

1. The method used to combine factors such as likelihood, impact, exploitability, and asset criticality into a risk estimate or score. Risk calculation can be qualitative, quantitative, or hybrid, but it only helps if the assumptions behind the numbers are clear and defensible.

   In plain English: The way an organization computes or estimates the seriousness of a risk.

   Example: "Their old risk calculation overweighted CVSS and underweighted internet exposure, which led to poor prioritization."

Related Terms

• Penetration Testing
• Host Scanning
• Penetration Test
• Reputation Score
• Risk Analysis
• Risk Level
• Risk Profile
• Risk Rating
• Risk Score