Measure of magnitude of loss or damage that could occur if a Risk manifests.

  • 50% exposure factor affects half the organization
  • 100% exposure factor affects the entire organization