Criticality Descriptor
Effective 5 The control is absolutely critical to the management and reduction of the risk. If this control is ineffective or partially effective, the likelihood and/or consequence of the risk will increase significantly (i.e. increases likelihood or consequnece by 3 or more levels) Almost Certain Severe Extreme Yes
Mostly Effective 4 The control is very important to the management and reduction of the risk. If this control is ineffective or partially effective, the likelihood and/or consequence of the risk will increase  (i.e. increases likelihood or consequnece by 2 levels) Likely Major High No
Partially Effective 3 The control is important to the management and reduction of the risk. If this control is ineffective or partially effective, the likelihood and/or consequence of the risk will increase  (i.e. increases likelihood or consequnece by 1 level) Possible Moderate Medium
Not effective/non-existent 2 The control has some impact on the management and reduction of the risk.  Depending on the criticality of the other controls, an analysis should be undertaken to determine the necessity of this control. Unlikely Minor Low
1 The control has little to no impact on the management and reduction of the risk.  It is unlikely this control is required. Rare Insignificant