Glossary: Vulnerability Management and Monitoring

severity assessment

Working out how serious a finding is for your company. You start from the CVSS base score, then add exploitation (KEV, EPSS), environment, exposure factor and risk tolerance.