After a company identifies the potential risks, it must measure those risks. Epstein and Buhovac (2014, p. 185) identified a seven-stage process for measuring those risks. MINIMUM 2 REFERENCES Calculate the benefit associated with each issue that may generate risk. Calculate the potential costs for each and include reputation risks. Estimate the probability that the risks will happen. Multiply the potential cost by its probability to determine the expected value of each risk. Estimate when the risk may happen and calculate NPV. Add the NPVs of all risks and add as a line item in ROI. Calculate expected value of ROI. Consider a Saudi business and what the risks are. How might the company estimate the probability the risk will happen?