Once identified, risks should be assessed in terms of their likelihood and potential impact. Tools such as risk matrices, scenario analysis, and statistical models can help in this process. Quantitative assessments involve numerical data, while qualitative assessments involve subjective judgments.