| Impact → |
Negligible
(A) |
Marginal
(B) |
Considerable
(C) |
Critical
(D) |
Catastrophic
(E) | |
|---|---|---|---|---|---|---|
| Consequence | Environment (IE) | Slight effect | Minor effect | Localized effect | Major effect | Massive effect |
| Asset (IA) | Slight damage | Minor damage | Medium damage | Major damage | Extensive damage | |
| Health (IH) | Slight physical or mental harm | Minor physical or mental harm | Major physical or mental harm | Single fatality | Multiple fatalities | |
| Business continuity (IB) | Minor visible or barely recognizable disruption of service | Recognizable temporary disruption of service | Minor functional (permanent) disruption of service | Major functional (permanent) disruption of service | Complete outage of service | |
| Data protection (ID) | No data loss / no data disclosure | Loss of rebuildable secondary data, disclosure of public data | Loss of easily recoverable data, disclosure of internal data | Loss of recoverable data, disclosure of some protected data | Irrecoverable data loss, full disclosure of protected data | |
| ↓ Probability (within 5yrs) |
Certain (5) 81-100% |
A5 | B5 | C5 | D5 | E5 |
| Likely (4) 61-80% |
A4 | B4 | C4 | D4 | E4 | |
| Possible (3) 41-60% |
A3 | B3 | C3 | D3 | E3 | |
| Unlikely (2) 21-40% |
A2 | B2 | C2 | D2 | E2 | |
| Improbable (1) 0-20% |
A1 | B1 | C1 | D1 | E1 |
