Thus finding risk management tools that would eliminate possible subjectivity of decisions to be made becomes an important issue. It seems appropriate to focus on risk assessment. During risk assessment, current threats and their impacts are identified, then identified risks are prioritized.
Company management decides on risk response strategies based on risk assessment results, that is why well-informed decisions made during risk assessment are vital for efficiency of risk management process as a whole.