Question

After you had assigned the "1," "2," and "3" risk impact/risk factor values to the identified risks, threats, and vulnerabilities, how did you prioritize the "1," "2," and "3" risk elements? what would you say to executive management about your final recommended prioritization

Answer 1

We prioritize it by the number of orders given to a certain directive.