The risk framework categorises risks by reviewing the likelihood, impact, timing and mitigations in place to come to an overall assessment that allows determination of the overall significance of risks.