The ImpactQualificationVocab is the default STIX vocabulary for expressing the subjective level of impact of an incident.
|Insignificant||The impact is absorbed by normal activities.|
|Distracting||There are limited “hard costs”, but the impact is felt through having to deal with the incident rather than conducting normal duties.|
|Painful||Real, somewhat serious effect on the "bottom line".|
|Damaging||Real and serious effect on the “bottom line” and/or long-term ability to generate revenue.|
|Catastrophic||A business-ending event.|
|Unknown||The impact qualification is unknown.|
The vocab_name field specifies the name of the controlled vocabulary.
The vocab_reference field specifies the URI to the location of where the controlled vocabulary is defined, e.g., in an externally located XML schema file.