The process by which a risk is assessed, including its impact in terms of frequency and severity. The focus of risk measurement is to produce risk metrics that can be used for risk management.