To make the calculation, you take the potential impact of an event and multiply it by the odds of that event happening. For low-impact events, even a high probability of occurrence won’t affect the company’s total risk exposure by much, while for high-impact events, even a low probability of occurrence is potentially devastating.
Source: CSO