diff --git a/docs/user-guide/compliance/tutorials/threatscore.mdx b/docs/user-guide/compliance/tutorials/threatscore.mdx index bb5a006342..492f84c5d2 100644 --- a/docs/user-guide/compliance/tutorials/threatscore.mdx +++ b/docs/user-guide/compliance/tutorials/threatscore.mdx @@ -2,18 +2,16 @@ title: "Prowler ThreatScore Documentation" --- - - - ## Introduction -The **Prowler ThreatScore** is a comprehensive compliance scoring system that provides a unified metric for assessing your organization's security posture across compliance frameworks. It aggregates findings from individual security checks into a single, normalized score ranging from 0 to 100. +Prowler ThreatScore is a comprehensive compliance scoring system that provides a unified metric for assessing security posture across compliance frameworks. It aggregates findings from individual security checks into a single, normalized score ranging from 0 to 100. ### Purpose -- **Unified View**: Get a single metric representing overall compliance health -- **Risk Prioritization**: Understand which areas pose the highest security risks -- **Progress Tracking**: Monitor improvements in compliance posture over time -- **Executive Reporting**: Provide clear, quantifiable security metrics to stakeholders + +- **Unified view:** A single metric represents overall compliance health. +- **Risk prioritization:** Highlights which areas pose the highest security risks. +- **Progress tracking:** Monitors improvements in compliance posture over time. +- **Executive reporting:** Delivers clear, quantifiable security metrics to stakeholders. ## How ThreatScore Works @@ -29,7 +27,7 @@ Pass Rate = (Number of PASS findings) / (Total findings) The total number of checks performed (both PASS and FAIL) for a requirement. This represents the amount of evidence available - more findings provide greater confidence in the assessment. ### 3. Weight (`weight_i`) -A numerical value (1-1000) representing the business importance or criticality of the requirement within your organization's context. +A numerical value (1-1000) representing the business importance or criticality of the requirement within the organizational context. ### 4. Risk Level (`risk_i`) A severity rating (1-5) indicating the potential impact of non-compliance with this requirement. @@ -380,7 +378,7 @@ This comprehensive example demonstrates how: ### Example 4: Impact of Parameter Changes -Using the scenario, let's see how parameter changes affect the score: +Using the scenario, the following changes show how parameter adjustments affect the score: #### Scenario A: Increase Encryption Risk Level