Most Risk Managers makes use of a Risk Matrix System to ‘grade’ the risk which is impossible to do as a risk.
Whether the risk is great or small, it remains a risk. Risk creates the opportunity for crime to happen. A Risk Matrix applies to Health and Safety, not to crime and security risk.
I can make this statement because I have first-hand experience of incorrect Risk Assessments and learned from my mistakes. A true Risk Assessor only focuses on identifying the risks. He does not sell or install security hardware, nor is he part of the ‘solution’ in any way.