API Fields: Finding Grades

Diligence risk vectors are assigned finding grades based on its inherent risk and how best practices can be improved upon.

• Finding grades contribute towards the letter grade of the risk vector.
• Finding grades are not applicable (N/A) to Compromised System, User Behavior, and Public Disclosure risk vectors.

Slug Name	Description
good	– Low risk, aligned with best practices. These have a significantly positive impact on the letter grade.
fair	– Light risk and some opportunity to achieve best practices. These have a minor negative impact or no impact on the letter grade depending on the risk vector.
warn	– Moderate risk and departure from best practices. These have a moderately negative impact on the letter grade.
bad	– Significant risk and departure from best practices. These have a significantly negative impact on the letter grade.
neutral	– Observed data with neither positive nor negative risk. This does not positively or negatively impact the letter grade.
na	Finding grades are not applicable (N/A) to Compromised Systems and User Behavior.