6. Defining Impact Type and Risk Categories | CSFaaS