Comparing Control Ratings

Have you wondered how all the control ratings compare and how reliable a control is in the real-world? If so, this table might help.

It makes you realise that Soft Controls, those controls which are performed by people, need to have a lot of planning, infrastructure, training, oversight, etc. surrounding them to warrant anything by the lower-end of the ratings.

Standard Qualitative ValuesQuantitative Control Effectiveness ValuesDowntime per year
EffectivenessRRFPFDSILIntegrityminuteshoursdays
Assessed11.00000.00.000005259608766365.25
Requires Improvement30.33330.50.666671753202922121.75
Adequate100.10001.00.900005259687736.53
Strong300.03331.50.966671753229212.18
Excellent1000.01002.00.990005260883.65
3000.00332.50.996671753291.22
10000.00103.00.9990052690.37
30000.00033.50.9996717530.12
100000.00014.00.999905310.04