$17$

$2\mathrm{.}5$ points

A simple qualitative risk assessment formula includes whether a risk is high, medium, or low, significant or insignificant to an organization's objectives. This simple qualitative risk assessment formula can be used to determine the

$$ of a risk to help determine whether it is the kind of risk that needs to be addressed by management.