Guidance on a practical approach to rating threat likelihood and consequence, and how these scores are combined to deliver overall evaluation ratings as part of an effective Security Risk Management Framework.