Resources

Evaluate a defined failure scenario, its possible consequences, the evidence about likelihood, and the controls that can be tested. Keep uncertainty separate from severity.