Compromised (-5) for each time
If the threat compromises the system, the product loses five points. This loss may be reduced to four points if it manages to detect the threat, as this at least alerts the user, who may now take steps to secure the system.