Which data sources feed into the Calculated Risk Score along with inherent and residual risk scores?

Which data sources feed into the Calculated Risk Score along with inherent and residual risk scores?

• A. Attestation Score
• B. Control and Indicator Failure Factors
• C. Configuration Test Score
• D. Inherent risk score

Answer: (B)

The Calculated Risk Score combines what you already have as inherent risk and residual risk with additional inputs that reflect how well controls are functioning. Specifically, control and indicator failure factors are used as data sources to adjust the overall score. When controls fail or indicators signal weakness, these factors push the calculated risk higher, providing a fuller picture of risk by accounting for detected control gaps and monitoring signals. Attestation scores or configuration test scores can influence risk in other areas or views, but in this context they are not the data sources used to feed the Calculated Risk Score alongside inherent and residual risk.

The Calculated Risk Score combines what you already have as inherent risk and residual risk with additional inputs that reflect how well controls are functioning. Specifically, control and indicator failure factors are used as data sources to adjust the overall score. When controls fail or indicators signal weakness, these factors push the calculated risk higher, providing a fuller picture of risk by accounting for detected control gaps and monitoring signals. Attestation scores or configuration test scores can influence risk in other areas or views, but in this context they are not the data sources used to feed the Calculated Risk Score alongside inherent and residual risk.