Affect and likelihood: The magnitude of likely harm to information and facts property from threats and vulnerabilities And just how serious of a danger they pose to the assets; cost–gain analysis could also be A part of the influence assessment or different from it A privaten