Business Cyber Risk Score Calculator
ANA›Life Services Authority›National Calculator Authority›Business Cyber Risk Score Calculator
.calc-container { max-width: 640px; margin: 2rem 0; padding: 1.5rem; background: #fff; border: 1px solid #ddd; border-radius: 8px; box-shadow: 0 1px 3px rgba(0,0,0,0.06); font-family: system-ui, -apple-system, sans-serif; } .calc-container h3 { font-family: Georgia, serif; font-size: 1.15rem; color: #1a1a1a; margin-bottom: 1rem; padding-bottom: 0.5rem; border-bottom: 2px solid var(--ac, #3d5a80); } .calc-row { display: flex; align-items: center; gap: 0.75rem; margin-bottom: 0.75rem; flex-wrap: wrap; } .calc-row label { min-width: 160px; font-size: 0.9rem; color: #333; font-weight: 500; } .calc-row input[type="number"], .calc-row select { flex: 1; min-width: 120px; max-width: 200px; padding: 0.5rem 0.6rem; border: 1px solid #ccc; border-radius: 4px; font-size: 0.9rem; font-family: system-ui, sans-serif; color: #1a1a1a; background: #fafaf8; } .calc-row input:focus, .calc-row select:focus { outline: none; border-color: var(--ac, #3d5a80); box-shadow: 0 0 0 2px rgba(26,74,138,0.12); } .calc-row .unit { font-size: 0.82rem; color: #888; min-width: 30px; } .calc-btn { display: inline-block; margin-top: 0.5rem; padding: 0.55rem 1.5rem; background: var(--ac, #3d5a80); color: #fff; border: none; border-radius: 4px; font-size: 0.9rem; font-weight: 600; cursor: pointer; font-family: system-ui, sans-serif; } .calc-btn:hover { opacity: 0.9; } .calc-result { margin-top: 1.25rem; padding: 1rem 1.25rem; background: #f0f6fc; border-left: 3px solid var(--ac, #3d5a80); border-radius: 0 6px 6px 0; display: none; } .calc-result.visible { display: block; } .calc-result-label { font-size: 0.78rem; text-transform: uppercase; letter-spacing: 0.06em; color: #666; margin-bottom: 0.25rem; } .calc-result-value { font-size: 1.6rem; font-weight: 700; color: var(--ac, #3d5a80); } .calc-result-detail { font-size: 0.85rem; color: #555; margin-top: 0.5rem; line-height: 1.5; } .calc-note { margin-top: 1rem; font-size: 0.8rem; color: #888; font-style: italic; } .calc-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 0.75rem; margin-top: 0.75rem; } .calc-grid-item { padding: 0.6rem 0.8rem; background: #f8f9fa; border-radius: 4px; border: 1px solid #eee; } .calc-grid-item .label { font-size: 0.75rem; color: #888; text-transform: uppercase; letter-spacing: 0.04em; } .calc-grid-item .value { font-size: 1.1rem; font-weight: 600; color: #1a1a1a; } @media (max-width: 720px) { .calc-row { flex-direction: column; align-items: flex-start; gap: 0.3rem; } .calc-row label { min-width: auto; } .calc-row input[type="number"], .calc-row select { max-width: 100%; width: 100%; } .calc-grid { grid-template-columns: 1fr; } } .calc-chart { margin: 1rem 0; text-align: center; } .calc-chart svg { max-width: 100%; height: auto; } .calc-chart-legend { display: flex; flex-wrap: wrap; justify-content: center; gap: 0.6rem 1.2rem; margin-top: 0.6rem; font-size: 0.8rem; color: #555; } .calc-chart-legend span { display: inline-flex; align-items: center; gap: 0.3rem; } .calc-chart-legend i { display: inline-block; width: 10px; height: 10px; border-radius: 2px; font-style: normal; } .calc-related { max-width: 640px; margin: 2rem 0 1rem; padding: 1.25rem 1.5rem; background: #f8f9fa; border: 1px solid #e8e8e8; border-radius: 8px; } .calc-related h3 { font-family: Georgia, serif; font-size: 1rem; color: #1a1a1a; margin: 0 0 0.75rem; padding-bottom: 0.4rem; border-bottom: 2px solid var(--ac, #3d5a80); } .calc-related-list { list-style: none; padding: 0; margin: 0 0 0.75rem; display: grid; grid-template-columns: 1fr 1fr; gap: 0.4rem 1.5rem; } .calc-related-list li a { font-size: 0.88rem; color: var(--ac, #3d5a80); text-decoration: none; } .calc-related-list li a:hover { text-decoration: underline; } .calc-browse-all { margin: 0.5rem 0 0; font-size: 0.9rem; font-weight: 600; } .calc-browse-all a { color: var(--ac, #3d5a80); text-decoration: none; } .calc-browse-all a:hover { text-decoration: underline; } @media (max-width: 720px) { .calc-related-list { grid-template-columns: 1fr; } }
Business Cyber Risk Score Calculator
Assess your organization's overall cyber risk score (0–100) based on industry-standard factors including asset value, threat likelihood, vulnerability severity, and existing security controls. A lower score indicates better security posture.
Asset Value / Data Sensitivity (1–10)
Threat Likelihood (1–10)
Vulnerability Severity (1–10)
Security Control Effectiveness (1–10, 10 = best)
Past Incident History Score (1–10, 10 = many incidents)
Number of Employees
Remote Workforce Percentage (0–100%)
Number of Third-Party Integrations / Vendors
Calculate Risk Score
function busCalc() { // --- Gather inputs --- var assetValue = parseFloat(document.getElementById('bus-asset-value').value); var threatLikelihood = parseFloat(document.getElementById('bus-threat-likelihood').value); var vulnSeverity = parseFloat(document.getElementById('bus-vuln-severity').value); var controlEffect = parseFloat(document.getElementById('bus-control-effectiveness').value); var incidentHistory = parseFloat(document.getElementById('bus-incident-history').value); var employeeCount = parseFloat(document.getElementById('bus-employee-count').value); var remoteWorkPct = parseFloat(document.getElementById('bus-remote-work-pct').value); var thirdPartyCount = parseFloat(document.getElementById('bus-third-party-count').value);
var resultDiv = document.getElementById('bus-result');
// --- Validation --- var errors = []; if (isNaN(assetValue) || assetValue 10) errors.push("Asset Value must be between 1 and 10."); if (isNaN(threatLikelihood) || threatLikelihood 10) errors.push("Threat Likelihood must be between 1 and 10."); if (isNaN(vulnSeverity) || vulnSeverity 10) errors.push("Vulnerability Severity must be between 1 and 10."); if (isNaN(controlEffect) || controlEffect 10) errors.push("Control Effectiveness must be between 1 and 10."); if (isNaN(incidentHistory) || incidentHistory 10) errors.push("Incident History Score must be between 1 and 10."); if (isNaN(employeeCount) || employeeCount 100) errors.push("Remote workforce percentage must be between 0 and 100."); if (isNaN(thirdPartyCount) || thirdPartyCount 0) { resultDiv.style.display = 'block'; resultDiv.innerHTML = '' + errors.join('') + ''; return; }
// --- Formula --- // Base Risk = (Asset Value × Threat Likelihood × Vulnerability Severity) / 10 // Max raw base = 10×10×10/10 = 100 var baseRisk = (assetValue * threatLikelihood * vulnSeverity) / 10.0;
// Control Reduction Factor: higher control effectiveness reduces risk // Factor = (11 - controlEffect) / 10 → ranges 0.1 (perfect) to 1.0 (no controls) var controlFactor = (11.0 - controlEffect) / 10.0;
// Adjusted Risk after controls var adjustedRisk = baseRisk * controlFactor;
// Incident History Modifier: adds up to 10 points // Modifier = (incidentHistory - 1) × (10/9) → 0 at score=1, 10 at score=10 var incidentModifier = (incidentHistory - 1.0) * (10.0 / 9.0);
// Employee Scale Factor: log10 scaling, normalized so 1000 employees = 1.0 // Factor = log10(employeeCount + 1) / log10(1001) var employeeScaleFactor = Math.log10(employeeCount + 1) / Math.log10(1001);
// Remote Work Modifier: each 10% remote adds 0.5 points (max 5 pts at 100%) var remoteModifier = (remoteWorkPct / 10.0) * 0.5;
// Third-Party Modifier: each vendor adds 0.3 points, capped at 10 var thirdPartyModifier = Math.min(thirdPartyCount * 0.3, 10.0);
// Final Score (0–100) // Score = (adjustedRisk × employeeScaleFactor) + incidentModifier + remoteModifier + thirdPartyModifier var rawScore = (adjustedRisk * employeeScaleFactor) + incidentModifier + remoteModifier + thirdPartyModifier;
// Clamp to 0–100 var finalScore = Math.min(Math.max(rawScore, 0), 100);
// --- Risk Band --- var band, bandColor, recommendation; if (finalScore ' + finalScore.toFixed(1) + ' / 100 ' + 'Risk Band: ' + band + '
' + '' + 'Score Breakdown:
' + '' + '- Base Risk (Asset × Threat × Vulnerability / 10): ' + baseRisk.toFixed(2) + '' + '- Control Reduction Factor (×' + controlFactor.toFixed(2) + '): ' + adjustedRisk.toFixed(2) + '' + '- Employee Scale Factor (×' + employeeScaleFactor.toFixed(3) + '): ' + (adjustedRisk * employeeScaleFactor).toFixed(2) + '' + '- Incident History Modifier: +' + incidentModifier.toFixed(2) + '' + '- Remote Work Modifier: +' + remoteModifier.toFixed(2) + '' + '- Third-Party Vendor Modifier: +' + thirdPartyModifier.toFixed(2) + '' + '' + 'Recommendation: ' + recommendation + '
'; }
#### Formula
Step 1 – Base Risk: Base Risk = (Asset Value × Threat Likelihood × Vulnerability Severity) / 10
Step 2 – Control Reduction Factor: Control Factor = (11 − Control Effectiveness) / 10 Adjusted Risk = Base Risk × Control Factor
Step 3 – Employee Scale Factor: Employee Factor = log₁₀(Employees + 1) / log₁₀(1001) Normalizes organization size so 1,000 employees = 1.0 multiplier.
Step 4 – Modifiers: Incident Modifier = (Incident History − 1) × (10 / 9) Remote Modifier = (Remote % / 10) × 0.5 Third-Party Modifier = min(Vendors × 0.3, 10)
Step 5 – Final Score (clamped 0–100): Score = (Adjusted Risk × Employee Factor) + Incident Modifier + Remote Modifier + Third-Party Modifier
#### Assumptions & References
- Risk scoring methodology is adapted from the NIST SP 800-30 Rev. 1 risk assessment framework (Likelihood × Impact model).
- Control Effectiveness inversely reduces risk, consistent with ISO/IEC 27001 control maturity principles.
- Employee scale uses logarithmic normalization to reflect that larger organizations have proportionally larger attack surfaces, per Verizon DBIR findings.
- Remote workforce modifier reflects increased endpoint exposure; each 10% remote workforce adds 0.5 risk points, based on CISA Remote Work Security guidance.
- Third-party vendor risk is capped at 10 points, reflecting supply-chain risk per NIST SP 800-161 (Cybersecurity Supply Chain Risk Management).
- Incident history modifier reflects that organizations with prior breaches face elevated re-breach probability, per IBM Cost of a Data Breach Report 2023.
More Calculators
- Humidity and Dew Point Calculator for Delaware Climate
- Delaware Heat Pump Sizing Calculator
- Seasonal Energy Efficiency Ratio (SEER) Upgrade Savings Calculator
- HVAC Replacement Cost Estimator for Delaware Homes
- Pain and Suffering Damages Estimator
- Settlement Value Estimator
Read Next
Study Time Planner Authority Network America › Life Services Authority › National Calculator Authority .calc-container { max-width: 640px;...