I get presented way to often with correct numbers and security metrics that are good for nothing.
I find very surprising how popular it is to rate vulnerabilities, threats or risks using the High-Medium-Low scale or derivatives.
In practice is notoriously inefficient and a wast of time, as it only feeds the Chewbacca defense.
It does not promote either communication collaboration.
Learn why here:
The Chewbacca Defense at SouthPark
The Original Chewbacca Defense