What is the Cyber Score and how is it calculated?

The Cyber Score is an index that provides an overall assessment of your awareness and strength in cybersecurity. This synthetic score is calculated for individual students, teams, and the entire company.

The score is based on five main dimensions, represented in a radar chart:

1. Active Defense: Percentage of reported phishing emails (takes into account completed campaigns)

2. Behavior: Frequency of clicks on received phishing emails (takes into account completed campaigns)

3. Learning: Percentage of correct answers to Awareness quizzes.

4. Participation: Percentage of completed Awareness training modules.

5. Updating: Percentage of completed episodes and training capsules.

The scores of the different dimensions are recorded during the Cyber Guru training. For example, it takes into account how many quizzes have been completed correctly, how many phishing emails have been clicked or reported, and how many training episodes have been followed.

• Behavior: Based on the click rate on phishing emails, ranging from 0 to 1. Initially, all users start with a base score of 0.5 to prevent the value from deteriorating too quickly (**). Takes into account completed campaigns.

• Active Defense: Percentage of reported phishing emails compared to those received. Ranges from 0 to 1 based on the emails received up to that point. Takes into account completed campaigns.

• Learning: Percentage of correct answers to Awareness quizzes compared to the quizzes available up to that point, ranging from 0 to 1.

• Participation: Percentage of completed Awareness modules compared to those released up to that point. Ranges from 0 to 1.

• Updating: Percentage of completed episodes and informative capsules, compared to those released up to that point. Ranges from 0 to 1.

Example (virtuous user):

1. Before receiving an email, a user has only virtual data; in reality, they will have received 4 emails and clicked on 2, with a behavior index of 0.5.

2. The user receives an email and does not click. At this point, they will have 3 received emails of which one was clicked, and the behavior index rises to 0.67.

3. The user receives a second email and does not click. At this point, they will have 2 received emails of which 0 were clicked, and the behavior index rises to 1 (from this moment on, behavior only takes into account emails actually received - there are no more "fake" emails impacting the calculation).

Example (average user):

1. Before receiving an email, a user has only virtual data; in reality, they will have received 4 emails and clicked on 2, with a behavior index of 0.5.

2. The user receives an email and clicks. At this point, they will have 3 received emails of which two were clicked, and the behavior index drops to 0.33.

3. The user receives a second email and does not click. At this point, they will have 2 received emails of which 1 was clicked, and the behavior index returns to 0.5 (from this moment on, behavior only takes into account emails actually received - there are no more "fake" emails impacting the calculation).

WARNING: The cyber score takes into account the number of emails from completed campaigns, not those in progress.

If a company has not purchased all services, the radar chart is transformed into a histogram for easier reading.