5 or Less:
Manageable IT Risk with your current team and tools.
6 to 8:
High probability of IT Risk that may overwhelm your current capabilities.
More than 8:
Very likely you are not fully prepared to manage the IT Risk in your acquisition or divestiture.