Physical threats like theft, broken servers flood or fire damage. This has been identified as an unlikely threat but the consequence or impact would be high, why do you think it has been classified as unlikely with a high impact?

Electronic threats , hackers computer viruses ransomware fraudulent emails, this has been classified as likely with a high consequence, why do you think it has been classified as such.

Technical failures such as software bugs , computer crush and computer failure, this has been classed as occasional with a marginal severity. Why do you think it has been classified as such

Human error, data deletion, or failure to follow security procedure, this has been classified as unlikely but the impact would be high. Why do you think it has been classed as such

What are the Actions that need to be taken re the above risks?

What are some of the IT Management risk strategies that can be used?