7 February 2014 The process of assessing a given project or product risk to determine its ATT level of risk, typically by assigning likelihood and impact ratings and then aggregating those ratings into a single risk priority rating.