Security Score
How the score is weighted and how to work the findings list.
The score is a weighted view across four dimensions. It exists to order the work, not to produce a certificate.
Dimensions
| Dimension | What it measures |
|---|---|
| Access rights | Group breadth, escalation history and dormant privileged accounts |
| Export controls | Export volume, thresholds configured and out-of-hours activity |
| Session policy | Session lifetime, concurrency and unrecognised locations |
| Audit coverage | Proportion of sensitive models actually under tracking |
Working the findings
Each dimension expands into the specific findings behind its number, ordered by contribution. Resolve from the top, then re-score - the score recalculates on demand rather than on a schedule, so the effect of a change is immediate.
A score is not a target
A perfect score on a system with three tracked models means less than a middling score on a fully covered one. Read the coverage dimension first.