Risk assessment

Risk assessment happens continuously as the solution collects and correlates events to detect suspicious behavior.

An event is an occurrence of user behavior related to an organization's assets or environment, captured by monitoring specific channels for activities that may indicate a compromise of configured policies. Events comprise indicators of behavior and generate alerts that typically result in the elevation of a user's risk score.

Each event that triggers an alert has an associated risk impact. Each impact results in a calculated score between 0 and 100. The risk score is continuously computed and updated as new alerts are triggered.