Risk can also be defined as strategic, operational, change and unforeseeable. Strategic risks affect the development and implementation of an organisation’s strategy. Operational risk relates to production processes including the assets, people and legal controls which need to be adhered to as well as anything that could impact on the organisation’s ability to create value. Change risk relates to both planned and imposed changes to the organisation. It is never possible to plan for every eventuality, and sometimes events occur outside of what could reasonably have been forecast. These are termed unforeseeable risks. Risks would be evaluated based on their source and scope. For example, is the risk related to a single project, or would its impact be felt throughout the organisation or even externally? From this analysis, the impact can be rated as low, medium or high.