Which of the following is a KEY contributing factor in determining risk rankings to guide risk response?
Vulnerability severity is a direct contributor to risk assessment and prioritization because it indicates the seriousness of a weakness and supports risk-response decisions. The cost of controls is considered when choosing a treatment, whereas risk-management-process maturity is an organizational capability measure rather than a risk-ranking input.
Community Discussion