A risk score is a numerical value used to gauge cyber risk based on user behavior. It amalgamates factors such as learning performance, exposure to phishing and email security. Higher scores denote higher risk levels.

The score is shaped by four key factors: awareness, exposures, incidents and rewards. User behavior, training, exposure to breaches and positive actions influence the score. Decay periods affect incident and reward impact span over 365 days.