@JimB risk management and risk calculation is based on impact and likelihood after analysis of the situation. While calculating likelihood may be subjective, it requires significant justification on why a certain likelihood is chosen. It is a different type of subjectiveness and opinion based assessment as it still requires a certain level of proof and description. This question does not allow for such an assessment. Anyway, if you disagree feel free to take it to meta.securitystackexchange.com :) —
Lucas Kauffman 1 min ago