External Risk
1. User Impact == 1
2. Financial Impact== 1
3. Reputation Impact == 1
4. Regulatory/compliance or legal risk==0
Internal Risk
1. High Complexity==1
2. Technical/Domain proficiency==0
3. Frequently changing modules== 0
4. High impact on the interconnected system ==1
Risk severity == 5 (Critical)