Language selection

Appendix B Significance of Observations

To assist management in determining the impact of the observations, the following definitions are used to classify observations presented in this report:

Critical
relates to one or more significant weaknesses for which no adequate compensating controls exist. The weakness results in a high level of risk.
Essential
relates to one or more significant weaknesses for which no adequate compensating controls exist. The weakness results in a moderate level of risk.
Important
relates to one or more significant weaknesses for which some compensating controls exist. The weakness results in a low level of risk.
Date modified: