What are the factors that I need to consider while estimating the probability and impact of a cybersecurity risk?

I am trying to perform a risk assessment as a personal project (AI Security related). I am looking for factors that I should consider while estimating the probability and impact of a risk generally. From my readings I identified some probability factors such as threat actor capability, targeting motivation, vulnerability exploitability, etc. I wanted to know if there is any systematic and comprehensive framework available.

ai security assessment cybersecurity cybersecurity risk impact personal project risk risk assessment security