Fortinet white logo
Fortinet white logo

User Guide

Risk score calculation

Risk score calculation

The risk score for a device is calculated as a weighted sum of individual detection scores, based on a predefined matrix. This sum is capped at a maximum score, ensuring it does not exceed a defined ceiling. If a device has multiple detections with varying severities, the ceiling is determined by the highest severity level among those detections.

If a detection is muted or resolved, its score is 0. Otherwise, the score is calculated using the following matrix:

Scoring Matrix

Severity

Low Confidence

Moderate Confidence

High Confidence

Low

0.1

0.3

0.5

Moderate

0.5

1

2.5

High

1

2.5

5

Maximum Score Limits

To prevent extreme values, the score is capped based on severity:

Severity

Max Points

Low

2.5

Moderate

5

High

10

This scoring system helps prioritize detections based on how confident and severe they are, while also allowing flexibility for high-severity cases.

Risk score calculation

Risk score calculation

The risk score for a device is calculated as a weighted sum of individual detection scores, based on a predefined matrix. This sum is capped at a maximum score, ensuring it does not exceed a defined ceiling. If a device has multiple detections with varying severities, the ceiling is determined by the highest severity level among those detections.

If a detection is muted or resolved, its score is 0. Otherwise, the score is calculated using the following matrix:

Scoring Matrix

Severity

Low Confidence

Moderate Confidence

High Confidence

Low

0.1

0.3

0.5

Moderate

0.5

1

2.5

High

1

2.5

5

Maximum Score Limits

To prevent extreme values, the score is capped based on severity:

Severity

Max Points

Low

2.5

Moderate

5

High

10

This scoring system helps prioritize detections based on how confident and severe they are, while also allowing flexibility for high-severity cases.