308 Appendix A: Sample Security Risk Profile 19. Please rate the overall reputational damage to the organization if it was known to the user community or industry that the information resource has been breached or defaced in some manner: High Moderate Low E. DEFINITIONS Use the following definitions for Low, Moderate, and High ratings in this questionnaire: Rating Low Definition A compromise would be limited and generally acceptable for the organization, resulting in minimal monetary, productivity, or reputational losses There would be only minimal impact on normal operations and/or business activity A compromise would be marginally acceptable for the organization, resulting in certain monetary, productivity, or reputational losses Normal operations and/or business activity would be noticeably impaired, including the potential for breaches of contractual obligations A compromise would be unacceptable for the organization, resulting in significant monetary, productivity, or reputational losses The ability to continue normal operations and/or business activity would be greatly impaired, potentially resulting in noncompliance with legal or regulatory requirements and/or loss of public confidence in the organization Moderate High