1. Define the scenario unit
Enter a count only if the potential events can reasonably be modeled using the same monetary assumption.
2. Supply the monetary assumption
Use an amount supported by the specific law, enforcement analysis, settlement scenario, or counsel guidance relevant to the matter.
3. Enter a probability
Use the organization’s risk-scenario assumption for realization of the modeled monetary amount.
4. Add response spending
Estimate remediation plus legal or consulting expense separately so operational response is not hidden inside the penalty assumption.
5. Stress-test the model
Change event count, severity, and probability to see which assumptions have the largest effect on the scenario total.