The risk score consolidates signals from simulations, courses, reports and behavior into a number that can be tracked over time. It's used to prioritize, not to discipline. It's the metric a board can read without translating completion rate.
Risk score
A comparable index of the human risk of a person, a team or the company.
Definition
SCIM 2.0 — Protocol for automatic user provisioning between the directory and Whalemate.
Security awareness training — The category already installed: training people in cybersecurity. HRM is what comes next.
SIEM — The system where the security team centralizes events and incidents.
Smishing — Phishing via SMS. At Whalemate it runs as a professional service, not a native channel.
Questions about Risk score
What is Risk score?
How does Whalemate use it?
Articles, guides and analysis on human risk management,
awareness and security culture
Guides and analysis for CISOs, IT and compliance teams in LATAM who need to explain the human factor — and decide what to do about it.

How to measure human risk without turning the score into a disciplinary weapon
The risk score is used to prioritize interventions. The contract must clearly state it's not used to sanction a person.
Read moreWant to see HRM in your organization?
Book a demo and we'll look at the program with data from your industry.