Risk Scoring
Quantify risk per device and per site with a unified score that combines compliance posture, CVE exposure, configuration drift, and access controls. Know where your highest risk is at a glance.
- ✓Per-device risk score (0–100)
- ✓CVE CVSS integration
- ✓Compliance gap weighting
- ✓Config drift factor
- ✓Trend over time
- ✓Priority remediation queue
Risk Quantified Across Every Signal
A single composite score per device, not four separate dashboards. CVE exposure, compliance failures, config drift, and access gaps all in one number.
Composite Scoring
A single 0–100 risk score per device that combines compliance posture, CVE exposure, configuration drift, and access control weaknesses, weighted by impact.
CVE Integration
CVSS scores from known CVEs are factored directly into the device risk score. Unpatched critical vulnerabilities push the score high, automatically.
Compliance Weight
Compliance gaps from NIS2, ISO 27001, PCI-DSS, and other frameworks contribute to the overall risk score. Failed critical controls count more than informational ones.
Drift Detection
Configuration changes that move a device away from its baseline increase its risk score in real time. No manual review needed to catch regression.
Trend Analysis
Track how each device's risk score changes over time. Spot devices that are trending in the wrong direction before they become incidents.
Remediation Priority
Devices are automatically queued by risk score. Your team always knows which device needs attention most urgently, no manual triage required.
How It Works
Collect Data
ConnectMyAssets continuously collects device configurations, CVE feeds, compliance rule outcomes, and access control data across your entire infrastructure.
Compute Score
A composite algorithm combines all signals, CVE CVSS, compliance failures, config drift, and access gaps, into a single 0–100 risk score per device.
Act on Priorities
The remediation queue surfaces the highest-risk devices first. Assign tickets, track progress, and watch scores improve as fixes are applied.
What Goes Into the Score
Every risk score is a weighted composite of four independently measured signals.
Frequently Asked Questions
Common questions about network compliance risk scoring
What signals are factored into the risk score?
The composite risk score combines four independent signals: CVE exposure (CVSS scores of known vulnerabilities on the device's firmware), compliance gaps (failed controls across NIS2, ISO 27001, PCI-DSS, and CIS), configuration drift (distance from the hardened baseline), and access control weaknesses (open management ports, weak credentials, ACL gaps). Each signal is weighted and the result is a single 0 to 100 score per device.
How is the score different from a raw CVSS score?
A CVSS score only reflects the severity of a single vulnerability in isolation. The ConnectMyAssets risk score is device-wide and reflects the full exposure of that device, including its compliance posture, how far it has drifted from baseline, and how accessible its management interfaces are. A device with a moderate CVSS vulnerability but poor access controls and multiple compliance failures will score higher than a device with the same CVE but a clean configuration.
How often is the risk score recalculated?
The score is recalculated automatically whenever a new data point is received: a configuration backup, a new CVE feed update, or a compliance rule evaluation. In practice, scores update multiple times per day without any manual trigger. You always see the current risk posture, not a stale snapshot.
Can I see how the risk score has evolved over time for a device?
Yes. Each device has a score history timeline that shows how its risk score has changed over time. You can correlate score changes with specific configuration events or CVE publications. This makes it straightforward to demonstrate to management or auditors that remediation actions have measurably reduced device risk.
Can the risk score feed into our existing SIEM or ticketing system?
Yes. ConnectMyAssets can export risk score changes via webhook or syslog, allowing your SIEM or ITSM platform to ingest score updates and create tickets automatically. The integration is configured from the appliance administration interface and does not require any code changes on your side.
Is the scoring methodology transparent and auditable?
Yes. For every device score, ConnectMyAssets shows a full breakdown of the contributing signals and their weights. An auditor or security manager can drill down to see exactly why a device has a given score, which CVEs are contributing, which compliance controls are failing, and how much each factor weighs in the final result.
See Your Highest-Risk Devices Today
Stop guessing which devices to patch first. ConnectMyAssets computes a unified risk score across your entire infrastructure, continuously and automatically.