Table 2.

Assessment scale – level of risk

Qualitative valuesSemi-quantitative valuesDescription
High4Risk may result in multiple severe or catastrophic adverse effects on organizational operations and assets
Medium3Risk may lead to a serious adverse effect on organizational operations and assets
Low0–2Risk may result in negligible or limited adverse effects on organizational operations and assets

Source:

NIST (2012) 

or Create an Account

Close Modal
Close Modal