Industrial Cybersecurity & OT Risk worked example

Remote Access Risk Score with remote access impact score of 20 score: a worked example

Push remote access impact score up to 20 score and the picture changes. This example computes every intermediate figure at that operating point. Use it when reviewing vendor access, jump hosts, VPN access, privileged sessions, and remote support controls for OT environments.

The inputs for this scenario

  • Remote access impact score: 20 score (raised for this scenario; the documented default is 8)
  • Remote access exposure score: 6 score (unchanged)
  • Remote access control weakness score: 5 score (unchanged)

Working through the calculation

  • Applying the documented formula (Remote access risk score = remote access impact score × remote access exposure score × remote access control weakness score) to the inputs above produces each figure below.
  • At this operating point the engine returns 11.35 score for remote access risk score, the number this scenario is built around.
  • At this operating point the engine returns 20 score for remote access impact score.
  • At this operating point the engine returns 6 score for remote access exposure score.
  • At this operating point the engine returns 5 score for remote access control weakness score.

How this compares with the baseline

  • Against the tool's baseline example, where remote access impact score sits at 8 score and the headline result is 6.55 score, this scenario comes in 73.28% above the baseline at 11.35 score.
  • It multiplies a remote path's impact, exposure, and control weakness scores into a single comparable risk number. The value of this scenario is the size of the gap it exposes: that gap, priced out over a year, is the budget you can justify spending to close it.

Results at a glance

  • Remote access risk score: 11.35 score (headline result)
  • Remote access impact score: 20 score
  • Remote access exposure score: 6 score
  • Remote access control weakness score: 5 score

Run it with your numbers

  • Every input above is editable in the live Remote Access Risk Score calculator, which recalculates instantly and can be shared with the inputs intact.

Last reviewed 2026-05-12.