Classifying networks/systems/applications based on impact is only the beginning of how we can address vulnerabilities. The preceding examples are just ideas of how we can incorporate threat intelligence into the business processes of risk management. By integrating threat intelligence into reporting and customizing reporting based on risk analyses, we can improve our OODA loop, reduce potential attack vectors for our adversaries, and decrease the probability of exploitation.