What gets translated
Impact
How severe the finding becomes if abused, including financial and reputational effects.
Priority
Which actions must happen now, which can wait and which depend on other functions.
Ownership
Who needs to act and how coordination should happen to close the risk.