These are the forces that influence risk:
- Control effectiveness
- Business model changes
- Threat landscape shifts
- Incidents and near misses
- Improved visibility
- Governance and risk appetite
What influence moves the arrows (frequency ↑, impact ↑) (frequency ↓, impact ↓)