There are 3 measures you could use for risk management: 1. Importance How important if thsi risks will be happening. 3 levels: Not important, important, most important 2. Likely possibility: The occurance they probably happen 3 Levels: Not likely, likely, most likely 3. Impact on project: whatz the impact on project You could set them as 3~5 levels by considering your domain or business cha-racteristic. Finnaly, you need to frame a matrix to get them evaluated out. Materials or reference you could get from Cyberworld...