OWASP/RiskAssessmentFramework

Skill level incorrectly affects likelihood

rrroar opened this issue · 0 comments

Hi.

Higher technical skill level required from a threat actor should lower likelihood, not the other way around (as it is now).

See https://obet.us/owasprr.html#1,9,9,9,9,9,9,9,9,9,9,9,9,9,9,9,50 vs https://obet.us/owasprr.html#9,9,9,9,9,9,9,9,9,9,9,9,9,9,9,9,50

Thanks