Explain how we can determine the relative risk for each of the vulnerabilities through a process called risk assessment.
Discuss risk assessment, which assigns a risk rating or score to each information asset, which is useful in gauging the relative risk to each vulnerable information asset and making comparative ratings later in the risk control process.