< Previous | Contents | Next >
Impact
The level of impact is determined by evaluating the amount of harm that could occur if the vul- nerability in question were exploited or otherwise taken advantage of.
• High: taking advantage of the vulnerability could result in very significant financial losses, serious harm to the mission or reputation of the organization, or even serious injury, in- cluding loss of life.
• Medium: taking advantage of the vulnerability could lead to financial losses, harm to the mission or reputation of the organization, or human injury.
• Low: taking advantage of the vulnerability could result in some degree of financial loss or impact to the mission and reputation of the organization.