Episode 16

Applying your Risk Score: Where it Belongs & Where it Doesn't

#LTAPod is back for a new season of 5-minute AppSec with Mark Lambert and Luis Guzmán in the ArmorCode studio. On the table today: risk scores. We take a turn from last month's episode on risk prioritization/scoring to delve into how risk scores are utilized by teams—and when their use might backfire. As a standalone metric, one's overall score can be helpful for posture-at-a-glance; but as a measure or goalpost for team performance, security leaders may find their score too volatile or reductive. This should track when considering that a risk score's purpose isn't to quantify a team's efforts, but to prioritize them.

Resources

Subscribe for updates

Please enter a business email
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Please enter a business email
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.