1. Define the scenario count. Enter the number of potential enforcement actions or separately modeled issues. Do not assume every defect is legally a separate violation.
2. Set a penalty assumption. Use a verified statutory maximum, settlement scenario, counsel-approved assumption, or another clearly documented figure appropriate to the matter.
3. Apply probability weighting. Enter a scenario probability only if your risk process uses expected-value modeling; otherwise use 100% to see the full assumed penalty.
4. Add remediation cost. Estimate the work needed to correct the underlying control or accessibility problem.
5. Add other response cost. Include investigation, outside advisory, notice, testing, or other costs included in your scenario.
6. Compare weighted and unweighted views. Use both figures to avoid confusing expected-value planning with maximum or actual legal exposure.