PO5.3 DEFINE PRIORITIES
Prioritize risks so that the organization can effectively allocate resources to respond to these risks.
It is critical that the analysis be objective so that priorities are not drastically skewed into the "highest" category. Priority should be based on objective factors that include, but are not limited to:
> significant risk of enforcement action
> potential for irreversible harm to persons or the environment
> likely impact on entity operations or finances
> potential for negative publicity
An objective analysis of risks is important when defending resource allocation.