Describe the risk scenario in detail. The purpose is to let relevant people in the organization know, how this risk scenario affects the organization.
As an example, the risk scenario “Personnel gains unauthorized access to data” could be described as follows:
Unauthorized access to data can lead to a breach of privacy or the leak of business sensitive or proprietary information.