Cisco ips and risk rating

Which value is not used by the Cisco IPS appliance in the risk rating calculation?