Each issue identified during Security Assessment activities will be categorized in the technical reports according to the evaluation criteria of the standard methodologies used, weighting both technical and business factors to best assess the actual impact contextualized to the objective of the analyses.

Secure Network adopts the following standard methodologies to estimate the risk associated with vulnerabilities identified during security assessments:

he final risk value is obtained by combining the possible impact of the vulnerability with an assessment of the likelihood of its exploitation by an attacker, considering, for instance, the level of access needed, the extent of the issue, the knowledge required to use it.

Secure Network is willing to adopt other specific risk calculation methodologies adopted by the Client to provide a result compatible and comparable with previous analyses or internal processes.