The approach used to assess risk and its contributing risk factors, including quantitatively, qualitatively, or semi-quantitatively.
Source(s):
CNSSI 4009-2015
from
NIST SP 800-30 Rev. 1
NIST SP 800-30 Rev. 1
under Assessment Approach