Risk Score
A Risk Score is a calculated indicator representing the relative risk associated with an identity, account, entitlement, request, or access situation.
Definition
A Risk Score is a quantitative or semi-quantitative measure used in IAM to prioritize decisions, approvals, reviews, or remediation activities. It can be derived from signals such as privilege level, toxic combinations, inactivity, ownership gaps, sensitivity of accessed systems, abnormal patterns, or historical usage.
Why it matters
Risk Scores help focus governance effort where exposure is highest rather than treating all access equally.
The Ariovis perspective
Ariovis treats the person or service, its context and its responsibilities as the starting point. Accounts and permissions are technical consequences that must remain tied to a governed identity.
Related services
Common pitfalls
- A common pitfall is computing risk scores without transparent logic, making them unactionable for reviewers.
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.