Risk Scoring & Analytics
A human risk score built from what people actually do, not just what they complete
Claro scores risk asynchronously from real behavior, clicking a link, submitting a form, reporting an email, completing or missing training, so you can see risk trending at the individual, department, and organization level.
Organisation Risk Score
A department risk view shows trend lines alongside a reporting-rate metric and this month's most-improved teams.
A single click-rate number tells you almost nothing about whether your organization is actually getting safer. Claro's risk scoring engine pulls from a wider set of behavioral factors, whether a simulated link was clicked, whether a form was submitted, whether the email was reported instead, whether assigned training was completed or left overdue, and for organizations running vishing, whether a call was complied with, refused, or reported, and recalculates scores asynchronously as those events happen rather than on a fixed nightly batch.
Those scores roll up into views at the individual, department, group, and organization level, each with trend analysis so a manager can see whether risk is moving in the right direction over time, not just where it sits today. Two metrics in particular are built for the story compliance and security teams need to tell upward: a reporting-rate metric that tracks the behavior you actually want to encourage, and a most-improved view that surfaces the users and departments making the fastest progress, alongside peer benchmarking against industry reporting-rate averages. Everything exports to PDF or CSV for board packs and manager one-on-ones.
What you get
Multi-factor, behavior-driven scoring
Risk scores incorporate link clicks, form submissions, phishing reports, training completion or overdue status, and vishing call outcomes, not a single click-rate metric.
Asynchronous, event-driven recalculation
Scores update from a dedicated risk-score queue as behavioral events happen, so the score reflects recent activity rather than a stale nightly batch.
Individual, department, group, and org-level views
Drill from an organization-wide risk trend down to a single department, group, or individual, with trend lines at every level.
Reporting-rate metric
A dedicated reporting-rate metric tracks the behavior security teams most want to reinforce: recognizing and reporting suspicious messages, not just avoiding clicks.
Most-improved users and departments
A most-improved view surfaces the people and teams making the fastest measurable progress, giving managers a positive story to reinforce alongside the risk numbers.
Peer benchmarking and board-ready export
Compare your organization's reporting rate against industry averages, and export any view to PDF or CSV for board packs and manager reviews.
Built for Indonesia
Numbers built to survive a board or regulator meeting
OJK examiners and bank boards expect trend data, not a single vanity metric. Claro's risk scoring is designed to answer 'are we improving' with defensible, exportable figures, department by department, and the same data feeds directly into the compliance reporting module for regulator-facing evidence.
- Reporting-rate and most-improved metrics built specifically for board and regulator narratives
- Department and group-level views that map to how Indonesian institutions are actually organized
- PDF and CSV export for board packs, audit evidence, and manager one-on-ones
Frequently asked questions
No. Risk scores incorporate multiple behavioral factors: link clicks, form submissions, phishing reports, training completion or overdue status, and, where vishing is in use, call outcomes like compliance or reporting.
Related pages
Phishing Reporting
A one-click Outlook and Gmail report button that matches reported emails to simulations, rewards reporters, and routes real threats to your admins.
Learn moreVishing Simulation
Branching voice-call simulations with typed script nodes, DTMF-driven flows, and outcome capture that feeds directly into risk scoring and training.
Learn moreWhatsApp Phishing Simulation
Simulate the phishing channel Indonesian employees actually use most, with localized WhatsApp templates and outcomes feeding the same risk pipeline.
Learn moreSee it running on your own domain
Book a walkthrough with our team and we'll show you this capability configured for your organization's compliance requirements and language needs.
Book a walkthrough