Findings and remediation
Understanding finding severities
How Info, Low, Medium, High, and Critical are used for prioritisation.
- Audience
- All workspace members
- Plan availability
- All plans
- Last reviewed
Finding severities help you prioritise remediation. They are a guidance aid, not a legal or compliance conclusion.
Severity levels
| Severity | Typical use |
|---|---|
| Info | Useful signal; usually not urgent on its own |
| Low | Lower-priority issue worth tracking |
| Medium | Meaningful issue that should be planned and assigned |
| High | Important issue needing prompt review |
| Critical | Highest-priority issue in the current model |
How to use severities
- Start with Critical and High findings for immediate review.
- Plan Medium items into your remediation backlog.
- Track Low and Info items for context and hygiene improvements.
Expected result
Your team can agree on remediation order using consistent severity labels shown in the findings list and detail views.
Note: Severity reflects prioritisation within Cyber Health Score. It does not replace your organisation's risk assessment or regulatory obligations.
Related documentation
Related documentation
Return to the documentation home to browse all topics.
Back to documentation