Risk Estimator

for issue:


Factors for estimating frequency

Threat Agent:

Motive
Popularity

Vulnerability:

Ease of discovery
Ease of exploit

Factors for estimating Impact

Technical Impact Factors:

confidentiality or disclosure
Loss of integrity/availability
Secure Device State
Arbitrary Code Execution

Business Impact Factors:

Compromised Critical Core Component
Financial Damage
Reputation Damage
Non-Compliance
Privacy Violation