The risk score consolidates signals from simulations, courses, reports and behavior into a number that can be tracked over time. It's used to prioritize, not to discipline. It's the metric a board can read without translating completion rate.
HRM glossary
Risk score
A comparable index of the human risk of a person, a team or the company.
What is Risk score?
PAS (Phishing Awareness Score) — A specific metric of how much a person or area recognizes and reports phishing.
Report rate — Percentage of simulated (or real) threats that staff report using the phishing button.
Completion rate — Percentage of people who finished a course. The metric HRM stops using as the main KPI.
Human Risk Management (HRM) — Managing cyber risk with a focus on people's behavior, not on completing a course.
HRM glossary
Questions about Risk score
What is Risk score?
A comparable index of the human risk of a person, a team or the company.
How does Whalemate use it?
The risk score consolidates signals from simulations, courses, reports and behavior into a number that can be tracked over time. It's used to prioritize, not to discipline. It's the metric a board can read without translating completion rate.
Want to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.