numerical assessment results, if possible), tendency or probability of occurrence. Supplementary information on specific measures already put in place and substantial alleviation of risk impacts may also be

likelihood or frequency of incidents and significant or potential impacts in order to prioritizing the management of information technology risk; (3) establishment of tools and measures for managing risk level

investment. Describe the characteristics of such risks as well as the causative circumstances and potential impacts thereof (display numerical assessment results, if possible), tendency or probability of

characteristics of such risks as well as the causative circumstances and potential impacts thereof (display numerical assessment results, if possible), tendency or probability of occurrence. Supplementary