@@ -813,7 +813,7 @@ Risk factor levels are determined by reading the descriptions for each risk fact
For each threat, a formula based on the risk factor levels is used to calculate the Likelihood and Impact of the threat, on a scale of Low, Medium, and High.
For each threat, both likelihood and impact must be Low before the risk is considered sufficiently mitigated. If the calculated levels are not already Low, then mitigations must be applied until both likelihood and impact are Low. The mitigation sets that will accomplish this are listed in each threat description.
For each threat, both likelihood and impact should be Low before the risk is considered sufficiently mitigated. If the calculated levels are not already Low, then mitigations should be applied until both likelihood and impact are Low. The mitigation sets that will accomplish this are listed in each threat description.
