Once risks are identified, the next step is to assess their potential impact and likelihood. This can be done using qualitative and quantitative methods. Qualitative assessment involves subjective judgment based on experience and intuition, while quantitative assessment uses statistical models and historical data to predict outcomes. The goal is to categorize risks into high, medium, and low priorities for further action.