Appendix J - Risk Matrix

Risk in Protect4S VM is based on several metrics like the CVSS scores provided by SAP, on the existence for example of publicly available exploits for specific vulnerabilities and our teams' experience build up over the past 2 decades.

For each vulnerability we provide a rating of the Impact and Likelihood. The calculated risk is a combination of those according to the below matrix:

Risk, Impact and likelihood