GDPR risk assessment is the process of identifying, analyzing, and evaluating threats and vulnerabilities. In terms of information security, risk assessment methodology means to make sure that everyone who is conducting or interpreting their findings is on the same page.
One must have a methodology, i.e. a set of rules to abide by to conduct a risk assessment. Methodologies also outline some specific terms for an organization
1. Baseline security criteria
2. Risk scale
3. Risk appetite
4. Asset or scenario-based risk management