Task Descriptor: Evaluate Security Risks

This taks describes the main aspects of ranking and prioritizing the discovered security issues.

Relationships

Inputs	Mandatory: Test Findings	Optional: Test Evaluation Summary Test Plan	External: None
Outputs	Test Evaluation Summary

Steps

Identify the Security Risks Associated with each Vulnerability

Collate the information, analyze the findings, and list the risks associated with each vulnerability.

Rank the Security Issues by Priority

Choose an appropriate risk analysis method, analyze each finding, and rank it using a simple scale (such as High, Medium, or Low).

Properties