Risk score

Also written: likelihood x impact

Likelihood (1–5) multiplied by impact (1–5), giving 1 to 25; it is a qualitative method because the ratings are judgments, not measurements. "Phishing steals a staff password" scores 16 and tops Kettle & Crane's list.