This document provides a framework for analyzing the likelihood of non-compliance within an organization. ​ It ranks the probability of non-compliance on a scale from 1 to 5, with 1 being the lowest likelihood and 5 being the highest. ​ Each rank is associated with specific existing controls and the frequency of non-compliance: