Risks are typically scored or rated based on their likelihood and impact. Likelihood refers to the probability that a risk will occur, while impact refers to the potential consequences of the risk. There are a number of different ways that risks can be scored or rated, depending on the needs and goals of the organization. Some common methods for scoring risks include:

1. Qualitative assessment: This method involves using subjective judgment and expert opinions to assess the likelihood and impact of a risk. This method is often used when there is limited data available, or when the risk is difficult to quantify.
2. Quantitative assessment: This method involves using statistical analysis and data to quantify the likelihood and impact of a risk. This method is often used when there is a large amount of data available, and when the risk can be expressed in numerical terms.
3. Probability and consequence scales: This method involves using a scale, such as a scale of 1 to 5, to rate the likelihood and impact of a risk. The scale can be customized to reflect the specific needs and goals of the organization.
4. Risk matrices: This method involves creating a matrix that plots the likelihood and impact of a risk on a grid. The grid can be divided into different risk categories, such as high risk, medium risk, and low risk, to help the organization prioritize and manage risks.

Regardless of the specific method used, it is important to score risks in a consistent and transparent manner, and to use a method that is appropriate for the specific risks being evaluated. Scoring risks can help the organization to prioritize risks and allocate resources appropriately, and to track progress on risk management efforts.