Metrics

Severity Ratings (0-4000)

1. Critical

• Range: 3200 to 4000

• Explanation: Represents the most severe issues that could have a significant impact on the organization, requiring immediate attention and remediation.

2. High

• Range: 2400 to 3199

• Explanation: Indicates significant issues that could potentially cause serious damage or disruption if not addressed promptly.

3. Medium

• Range: 1600 to 2399

• Explanation: Reflects moderate issues that should be addressed in a timely manner but may not pose an immediate risk.

4. Low

• Range: 0 to 1599

• Explanation: Represents less severe issues that have a minimal impact and can be addressed at a more convenient time.

Grading System (0-4000)

1. S (Superior)

• Range: 0 to 499

• Explanation: Excellent performance or security posture, with minimal issues or vulnerabilities.

2. A (Excellent)

• Range: 500 to 999

• Explanation: Very good performance or security posture, with only minor issues or vulnerabilities.

3. B (Good)

• Range: 1000 to 1499

• Explanation: Good performance or security posture, with some issues that need addressing but generally under control.

4. C (Average)

• Range: 1500 to 1999

• Explanation: Average performance or security posture, with a moderate number of issues that need attention.

5. D (Below Average)

• Range: 2000 to 2499

• Explanation: Below average performance or security posture, with several issues that need to be addressed urgently.

6. E (Poor)

• Range: 2500 to 2999

• Explanation: Poor performance or security posture, with many significant issues that require immediate action.

7. F (Failing)

• Range: 3000 to 4000

• Explanation: Failing performance or security posture, with critical issues that need immediate remediation to prevent severe consequences.

This setup allows you to classify severity and performance levels effectively within a 0-4000 range, facilitating a clear understanding of risk levels and necessary actions.