To be able to prioritize what should be worked on, there is a need to describe what importance each threat has. One threat might be at a low risk, but
linkedin.com