ClearPenTest

Findings and risk

Severity

Also called: finding severity, risk rating

Severity is the rating assigned to a finding to communicate how urgently it should be addressed, typically on a scale from informational to critical, and ideally reflecting exploitability and business impact rather than a score alone.

START WITH A CLEAR SCOPE

Testing, with the report an auditor can actually use

Scope an assessment