 |
| THREAT RATING MATRIX |
 |
RED - Severe Risk
(category 4)
|
This condition applies to active threats that pose a significant global risk to corporate computing infrastructures. Immediate defensive and prevention action is required. |
|
YELLOW - Moderate Risk
(category 3)
|
This condition applies to isolated or localized active threats that pose a significant risk to corporate computing infrastructures. Immediate defensive and preventive action is required. |
|
BLUE - Elevated Risk
(category 2)
|
This condition applies when knowledge of or the expectation of a reasonably harmless or containable computing threat is present. |
|
GREEN - Low Risk
(category 1)
|
This condition applies to threats that pose little risk to the computing environment and/or no reported incident activity in the wild. |
|