Risk
Materiality band
One of four labels describing how far a control failure reaches in this account, each carrying the identifiers of the rules that produced it.
Currentengine 9.0.0Verified 2026-08-30
The bands
| Band | Condition |
|---|---|
| Estate-wide | Account-scoped control, or 10 or more distinct resources, or failing in every region evaluated |
| Broad | 2 or more distinct resources, or failures spanning more than one region |
| Contained | Exactly one distinct resource |
| Not determinable | No resource identifier in the evidence. Reach is not guessed at |
Why it shows its working
Every band carries the identifiers of the rules that produced it, and the pack prints them. A band a reader cannot check is an opinion.
The two adjustments
A critical, externally reachable, preventive control is escalated one band, capped at estate-wide. A detective control is never escalated by severity.
What it does not mean
Not a severity, not a priority, and not a business impact. It is reach, measured from what was observed.