Arlo Solutions Interview Question

How do you determine POA&M severity and risk?