< Previous | Contents | Next >

Impact‌

The level of impact is determined by evaluating the amount of harm that could occur if the vul- nerability in question were exploited or otherwise taken advantage of.

• High: taking advantage of the vulnerability could result in very significant financial losses, serious harm to the mission or reputation of the organization, or even serious injury, in- cluding loss of life.

• Medium: taking advantage of the vulnerability could lead to financial losses, harm to the mission or reputation of the organization, or human injury.

• Low: taking advantage of the vulnerability could result in some degree of financial loss or impact to the mission and reputation of the organization.

< Previous | Contents | Next >