Which describes risk impact?