risk scoring

Risk scoring is a data-driven methodology that assigns numerical values to security events and entities to prioritize the threats that actually matter.

Modern risk scoring moves security teams past the noise of raw alerts by quantifying the severity of vulnerabilities and user behaviors. By calculating the product of probability and impact, systems like Splunk Enterprise Security or Alessa generate a dynamic score (typically 0 to 100 or 0 to 1,000) that reflects real-time exposure. This approach allows operators to automate triage for low-level events and focus manual investigation on high-risk anomalies, such as a sudden 500% spike in data egress or a login from a blacklisted IP. It is the backbone of Risk-Based Alerting (RBA), turning subjective 'gut feelings' into defensible, objective metrics that align technical risk with business continuity.

https://www.splunk.com/en_us/blog/learn/risk-scoring.html