Publication Date – March 19, 2021
Diligence findings are graded as GOOD, FAIR, WARN, BAD, or NEUTRAL based on its inherent risk and how best practices can be improved upon. These finding grades contribute towards the letter grade of the risk vector.
Finding grades are not applicable (N/A) to Compromised Systems and User Behavior.
| Slug Name | Description |
|---|---|
good |
Low risk, aligned with best practices. These have a significantly positive impact on the letter grade. |
fair |
Light risk and some opportunity to achieve best practices. These have a minor negative impact or no impact on the letter grade depending on the risk vector. |
warn |
Moderate risk and departure from best practices. These have a moderately negative impact on the letter grade. |
bad |
Significant risk and departure from best practices. These have a significantly negative impact on the letter grade. |
neutral |
Observed data with neither positive nor negative risk. This does not positively or negatively impact the letter grade. |
na |
Finding grades are not applicable (N/A) to Compromised Systems and User Behavior. |