3 ms·
An overall risk of "low" is incorrect here. The risk is "none" because it's not applicable to your environment. Or do you consider "low" a won't fix / not appl
by thaeli 6y ago
An overall risk of "low" is incorrect here. The risk is "none" because it's not applicable to your environment.
Or do you consider "low" a won't fix / not applicable categorization?
- yardstick 6y agoCould use none. Low because if something changes elsewhere and we inadvertently start using RSA by accident, for example. But yeah if it’s not med/high it’s not necessary to fix. Maybe some mitigation where appropriate.