2 ms·
I cannot understand why there are not 3 or 4 categories of incidence severity (user data exposed, etc. I think there is a standard or multiple) and management m
by mejutoco 3y ago
I cannot understand why there are not 3 or 4 categories of incidence severity (user data exposed, etc. I think there is a standard or multiple) and management maps each of those to a quantity in euros. Then everyone would get what they want, since it is just an estimate.
- apexalpha 3y agoThere's a standard for this called CVSS. We pointed it out but it gives a scale 1-10. And they really wanted € KPI. Oh well.