RSK-039Review overdueMethodology v2 · 5×5 · last scored Jun 30

Privileged admin accounts lack MFA on local console access

Inherent risk — before any controls

LikelihoodScale text is tenant-editable in Matrix & bands

Impact by dimension — overall impact is the worst dimensionOverall 4 · Major

Dimension1 · Negligible2 · Minor3 · Moderate4 · Major5 · Severe

CUI / data

Financial

Delivery

Contract & compliance

Or click the matrix

Score = likelihood × worst impact, banded by the tenant's matrix (Low 1–4, Medium 5–9, High 10–15, Critical 16–25). Rationale is required when the score changes by more than one band.

Scoring rationale

Inherent risk — before any controls

LikelihoodScale text is tenant-editable in Matrix & bands

Impact by dimension — overall impact is the worst dimensionOverall 4 · Major

Dimension1 · Negligible2 · Minor3 · Moderate4 · Major5 · Severe

CUI / data

Financial

Delivery

Contract & compliance

Or click the matrix

Score = likelihood × worst impact, banded by the tenant's matrix (Low 1–4, Medium 5–9, High 10–15, Critical 16–25). Rationale is required when the score changes by more than one band.

Scoring rationale