The level of sophistication is an important factor in the determination of the risk of a threat actor. Highly sophisticated threat actors are more likely to be successful if an attack is launched. Less sophisticated attackers have a lower probability of an attack being successful should it be launched.