After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD.