<b>15.8.1 Inputs</b><br/><b>15.8.1.1 Prerequisites</b><br/>The following information shall be available:<br/>— threat scenarios [WP-15-03];<br/>— impact ratings with associated impact categories [WP-15-04]; and<br/>— attack feasibility ratings [WP-15-06].<br/><b>15.8.1.2 Further supporting information</b><br/>None.<br/><b>15.8.2 Requirements and recommendations</b><br/><b>[RQ-15-15] </b>For each threat scenario the risk value shall be determined from the impact of the associated damage scenarios and the attack feasibility of the associated attack paths.<br/>NOTE 1 If a threat scenario corresponds to more than one damage scenario and/or an associated damage scenario has impacts in more than one impact category, a separate risk value can be determined separately for each of those impact ratings.<br/>NOTE 2 If the threat scenario corresponds to more than one attack path, the associated attack feasibility ratings can be appropriately aggregated, e.g. the threat scenario is assigned the maximum of the attack feasibility ratings of the corresponding attack paths.<br/><b>[RQ-15-16] </b>The risk value of a threat scenario shall be a value between (and including) 1 and 5, where a value of 1 represents minimal risk.<br/>EXAMPLE Methods for risk value determination:<br/>— risk matrices;<br/>— risk formulas.<br/><b><br/></b><b>Risk matrix example </b><br/><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><b></b><br/><b></b><b></b><b></b><b></b><b></b><b></b><b></b><br/><br/><br/><b></b><br/><b></b><b></b><b><i></i></b><b></b><b></b><b></b><b><i></i></b><b></b><br/><u></u><u></u><br/><br/>