16.6 IG2
Control 16 / Application Software Security
Establish and Maintain a Severity Rating System and Process for Application Vulnerabilities
In plain English
A rating system ranks software vulnerabilities by severity, so the most urgent fixes come first.
Related CSF subcategories (unofficial mapping)
No direct mapping.