Got it, I am going to leave this one here and keep looking
https://www.abriska.com/userguide/wiki/32/information-risk-assessment-process-overview
See impact??