thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Risk Evaluation

Comparing analyzed risk levels against risk criteria to decide which risks need treatment and in what priority.

Definition

Risk evaluation uses the organization's risk appetite, tolerance, and acceptance criteria to determine whether each risk is acceptable or requires treatment. It produces a prioritized list for decision makers. It considers legal, regulatory, and stakeholder obligations as well as risk level.

Example

Risks scoring above 15 on a 25-point scale are flagged for mandatory treatment plans.

Exam tip

Evaluation is a decision-support step; the risk owner still makes the treatment decision.

Related terms