Established criteria that are both qualitative and quantitative in nature to enable risk owners to determine the most appropriate risk level based on expertise. This helps to make risk assessment more objective in nature.