CVSS

CVSS 4.0 aims for greater clarity on cybersecurity risk -- adds OT, response components

New metrics for Operational Technology exposure include whether the "consequences of the vulnerability meet definition of IEC 61508 consequence categories of "marginal," "critical," or "catastrophic."