Rings are ordered by how much of your architecture the requirement dictates — not by size of penalty. They are not strictly nested: an organisation can sit in Ring 3 and Ring 4 at once. What matters is that the innermost ring your data reaches sets your floor for everything.
What moves you inward
Requirements start dictating where you runClick a document or a ring