Almost Web Application Penetration Testing report is focus on Technical view. Sometime this result unable to use for decision making for Management Level because of the management level does not understand the risks.
Myberry adopted the DREAD Model. It is qualitative risk analysis is opinion based. It use rating values to evaluate the risk level to help calculate risk that helps to determine what the impact of a security threat really means. DREAD is a classification scheme for quantifying, comparing and prioritizing the amount of risk presented by each evaluated threats.