Assessing risks means to evaluate risk in terms of which two factors?

1. The risks likelihood of occurring and the impact or consequences should the risk occur.
2. The risks possibility of disabling the organization and the number of IT domains the occurrence will affect.
3. The number of times the risk might occur and the dollar value of each occurrence.
4. The number of people the risk occurrence will affect and the number of people involved in mitigating the threat.