Glossary: Policies, Standards and Risk Management

NIST SP 800-30

Also written: SP 800-30

NIST's guide to risk assessment. It uses five levels from "very low" to "very high", much like 1-to-5 scoring.