When assessing risks, AEP categorizes risk impacts into six sub-categories – reliability, compliance and legal, reputational, financial, safety and strategic – and scores them based on the severity of potential consequences.