Risk Level Report
The Risk Level Report helps you identify and track potentially concerning user behaviors by assigning weighted scores to different types of activities. For example, occasional social media use may have less impact than frequent access to file-sharing sites. The Risk Level Report aggregates these weighted activities to help you:
- Track risk patterns by user based on how frequently an alarm is triggered
- Identify users with recurring issues who may need coaching
- Prioritize the handling of alarm notifications
- Compare users and groups
Content
How Risk Scoring Works
Risk scoring is based on ActivTrak alarms designed to help you identify activities that may be a risk to security or productivity. Each alarm can be assigned a risk level from 1 to 10 when created. (You can change risk levels anytime via Alarm configuration.) These risk levels are used to calculate two key metrics in the Risk Level Report.
1. Risk Points are calculated by multiplying:
- The number of times an alarm was triggered
- The risk level assigned to that alarm
For example, if a Level 3 alarm triggers 10 times, it generates 30 risk points (3 × 10).
2. The Risk Score provides a normalized way to compare users by dividing:
- The total risk points for each user
- The maximum number of activity logs for that user in the selected time period
This creates a relative score between 0 and 1 that can be compared across teams and time periods.
Reading the Report
The Users Tab
The Users tab is best used when investigating a user to learn about historical trends, and to identify or provide documentation on repeat infractions.
The Users tab displays:
- A user list with alarm counts and risk metrics
- A detailed breakdown of alarms by type and risk level
- Filtering options by date range and user groups
The Alarms Tab
The Alarms tab is best used to identify which users have the highest risk levels and might require further investigation or coaching.
The Alarms tab displays:
- An alarm list with user count and risk metrics
- A detailed breakdown of alarms by users and risk level
- Filtering options by date range and user groups
Best Practices
It's important to understand typical employee work patterns, since having a clear picture of routine behaviors helps you uncover potentially noncompliant and risky activities. To make the most of the Risk Level Report, consider these tips:
- Leverage the Risk Level report when investigating alarm notifications for a deeper understanding of user activity.
- Use risk levels consistently when creating new alarms.
- Combine the Risk Report with other reports, such as the Productivity Report and Top Websites Report, to get full context on user behavior.
- Regularly analyze user risk scores to identify behaviors most likely to violate critical security or data compliance policies.
Learn More
Need help? Contact ActivTrak Support for assistance configuring and using the Risk Level Report.
Was this article helpful?
0 out of 0 found this helpful
Comments
No comments