11. Frequently asked questions

Is the threshold or criticality C set by default?

No. It can be given by the customer, by a repository or by the company's organization.

Is the threshold or criticality C the only important indicator?

No. It's also important to check severity (G), occurrence (O) or detection (D) independently. In fact, a very high value in one of these three factors indicates a major weakness in the project, which needs to be corrected.

Do the results have to be communicated externally?

This depends on the degree of confidentiality required, or the desire to retain know-how. It is nevertheless possible to communicate only a summary of the elements or the main trends of the study.