Consider these two cases:
- Impact on Confidentiality as High
- Impact on Confidentiality as Low
Please note all other parameters are unchanged and environmental parameters are set as High.
Now, the score for Case 1 is 9.0, but Case 2 is 9.1. This is very strange as impact on C as high should ideally have a higher score value.
Does anyone have an explanation for this?
C: Impact on Confidentiality as High = 9.0
C: Impact on Confidentiality as Low = 9.1
