evaluate the risk exposure associated with changes to be made to the infrastructure and
services. The paper presents a method to evaluate risk exposure associated with a change.
Further, we show how to use the risk exposure metric to automatically assign priorities to
changes. The formal model developed for this purpose captures the business perspective by
using financial metrics in the evaluation of risk. Thus the method is an example of Business …