What factors needs to be considered when assessing the likelihood of risk and or harm?

A. Nature of the data elements breached

b. Number of departments affected

c. likelihood the breach may lead to harm

d. ability of the agency to mitigate the risk of harm