Category Threat Prioritization and Risk Scoring