title: What does risk assessment summary table for C rules mean?
body: <p>As per CERT C Coding Standard, every single rule is accompanied with a risk assessment summary table.  </p>
  
  <p>For example:</p>
  
  <p>Rule 02. Declarations and Initialization (DCL) </p>
  
  <p>DCL31-C. Declare identifiers before using them</p>
  
  <p>Risk Assessment Summary</p>
  
  <p>Rule        Severity    Likelihood    Remediation  Cost    Priority     Level</p>
  
  <p>DCL31-C      Low       Unlikely          Low                P3           L3</p>
  
  <p>What message does the risk assessment summary table convey the programmer, how does one interpret it? What are the above mentioned terms? What do they mean?</p>