Which statement is true about automatic signature and service pack updates?

Which three values are used to calculate the Risk Rating for an event? (Choose three.)