Triage

Stakeholder-Specific Vulnerability Categorization (SSVC)

SSVC is a decision-tree methodology from CMU SEI and CISA that prioritizes vulnerabilities by contextual facts — exploitation status, automatability, and mission impact — rather than a single severity number.