Understanding your score

Your score is the percentage of controls in a passing state, weighted by criticality. A 95+ score is generally audit-ready; below 70 means you have systemic issues to address before an external audit.

Weighting

• Critical controls (encryption, MFA, public exposure): weight 3
• High controls (logging, retention): weight 2
• Standard controls (metadata, tagging): weight 1