Severity Rating and Risk Classification

This lesson is for enrolled learners

The concept A findings list without severity ratings isn't useful to a client — they need to know what to fix before mainnet and what can wait. Professional audit firms rate findings on two independent axes: Impact — how bad is the outcome if the bug is triggered? Total loss of funds is worse than temporary denial of service, which……

Enroll to continue Already enrolled? Sign in