You are performing a risk assessment and prioritizing risks. You have estimated the cost of a loss caused by a certain attack. You estimated the potential frequency of the event over a period of time, and multiplied the cost times the frequency (the cost over that time period). Identify two reasons why the results may be misleading.