For ARA, you need to define a RAM (Risk Assessment Methodology). Within RAM, for each type of assessment (Inherent / Residual / Control / Target) you can define manual factors or group factors (e.g. Inherent Likelihood and Inherent Impact).
These factors can be configured to either get multiplied / summed / averaged etc.
If you need to build more complex logic, use scripted factors.
Final Risk Score of Risk is equal to Residual Risk score calculated through Residual Assessment.
