Welcome to Our AMA Session!

Toby Metcalf · 2025-05-12T18:10:58+00:00

There was an error rendering this rich post.

We're excited to kick off our "Ask Me Anything" with Masha Sedova, VP, Human Risk Strategist on May 13! In this video, you'll gain valuable insights into our innovative Human Risk Command Center, where you'll have access to Human Risk Insights, Risk Analysis, and Individual Risk Profiles. Whether you're curious about how Mimecast is shaping Human Risk Management or have your own questions, this is the perfect opportunity to engage and learn from our expert.

Join us as we dive into the discussion and make the most of this community experience!

https://video.mimecast.com/watch/x8Nx4dZz3bmizen1m5CpfL

Find more posts tagged with

Comments

Sarah Burke (570)

Thank you for the video Masha, I know customers are curious always about what is behind the number and may want to know a little more about how we get to the number score of the risk. Is there more information on how that number is calculated?

Masha

Thank you for your question! The risk score in the Human Risk Command Center is designed to provide a clear, actionable measure of an organization's and an individual’s security risk. It’s calculated on a scale from 0 to 10, similar to the Common Vulnerability Scoring System (CVSS), where 0 represents low risk and 10 represents high risk.

The score is derived from a combination of two factors:

Actions: This includes behaviors like clicking on phishing links, downloading malware, or failing to complete security training. Risky actions increase the score, while positive behaviors, such as reporting phishing attempts, can lower it.
Attacks: The frequency and severity of attacks targeting the individual are factored in. For instance, if a user is frequently targeted by phishing campaigns or other malware attacks, their score will increase.

One important aspect of the scoring system is its dynamic nature. A risky event, such as clicking on a phishing link, will affect a user’s score for one year. However, the system also rewards improvement: every month that goes by without a risky event in that category will gradually improve the user’s score. This ensures that the score reflects not only past behavior but also ongoing improvements and efforts to reduce risk.

If you want to read more about how we score, this is a great write-up on the topic: https://mimecastsupport.zendesk.com/hc/en-us/articles/34000474155283-Human-Risk-Command-Center-Human-Risk-Scoring#h_01JA8373V0JCPAE4W7AHSBBFJW