Please feel free to contact me anytime to share your thoughts: +1 612.357.1544 (cell), +1 952.567.6215 (direct), gerry.zack@corporatecompliance.org.
Most compliance professionals use some variation of the same model for assessing the severity of a compliance risk as part of a periodic risk assessment. Severity often considers the likelihood and impact of a risk. Just as the measurement of impact should consider multiple financial and nonfinancial factors, the consideration of likelihood should include several variables.