Even if you’ve completed all the training and tests, your risk score is 500 because there are some cyber threats beyond our control. For instance, you might still be vulnerable to sophisticated phishing emails or visit a malicious website that exploits a new security weakness. We can’t prevent all possible risks, like personal information being stolen from third party services. So, despite your efforts, there’s still a small chance of a cyber security issue and that’s why your score isn’t 0 but 500.