The risk rating is based on the event severity, the signature fidelity, and the target’s asset value.