(a) The size of any monetary loss or potential monetary loss to itself or its customers (either in terms of a single incident or group of similar or related incidents);

(b) The risk of reputational loss to the investment firm licensee; and

(c) Whether the incident or a pattern of incidents reflects weaknesses in the investment firm licensee's internal controls.