Security Mindset
Risk
How likely harm is and how bad it would be, given the threats, the weaknesses and the value at stake.
In more detail
Risk is not the same as severity. A severe flaw in a system nobody can reach may carry little risk, while a modest flaw on an exposed, valuable system may carry a lot. The four honest responses are to reduce, remove, accept or transfer it.