Finally, in phase C, stakeholders can now view each system/application, since the reports will reflect the increase of the scope and how they impact the environment. It is in this phase that we introduce another tier for impact determination, which will help drive remediation efforts:

Now that we understand the levels of impact for scanning and reporting, we will go on to how we look at remediation of vulnerabilities.