Scotiabank Interview Question

What criteria should be consider in Risk classification?