Thank you for your thoughts. I am trying to classify systems, not defects. I will definitely assign these ratings to the nonconforming scenarios.
Sure! What I was trying to suggest it to not classify defects; but classify systems based on the potential impact of a defect.