How do you calculate a product compliance risk score?

Multiply the severity, occurrence, and detection ratings. With severity 6, occurrence 4, and detection 3 the raw product is 72, which this tool scales to a 4.55 score on its normalized display.

What is a good compliance risk score?

Lower is better. There is no universal threshold; teams set an action line — for example, review anything in the top quartile of their register — because scores are only comparable within one scale.

Why multiply instead of add the ratings?

Multiplication makes a high rating on any single dimension dominate, so a rarely occurring but catastrophic and undetectable failure still scores high rather than being averaged down.

What is the difference between severity and detection here?

Severity rates how bad the consequence is if it reaches the market; detection rates how likely you are to catch it first. A high detection rating means it is hard to catch, which raises risk.

Should I act on the highest score first?

Yes, but also inspect the severity component directly — a very high severity should trigger action even at a moderate overall score, since a critical safety label defect must not be masked by a low occurrence rating.

Can I compare scores across different product lines?

Only if both lines use the identical severity, occurrence, and detection scales and anchor definitions. Otherwise the numbers are not comparable and you should rank within each line.

Product Compliance, Labeling & Certification calculator

Product Compliance Risk Score Calculator

The product compliance risk score is an FMEA-style RPN that multiplies severity, occurrence, and detection ratings into a single number for prioritizing compliance risks. Quality engineers, regulatory affairs teams, and product-safety reviewers use it to rank labeling errors, certification gaps, and non-conformance modes so limited resources hit the highest-risk items first. Because it multiplies three factors, a high rating on any one dimension — a severe consequence, a frequent occurrence, or a hard-to-detect failure — pulls the whole score up. The score is only meaningful when the same rating scale is applied consistently across every risk you compare.

What this calculator does

Estimate product compliance risk for product compliance, labeling and certification using production-ready inputs so teams can rank risks and decide which issue needs containment, controls, or escalation first.
Use it when product compliance risk in product compliance, labeling and certification needs a defensible ranking against other product compliance, labeling and certification risks for the next review.
It multiplies the severity, occurrence, and detection ratings to produce a single risk priority score for ranking compliance risks against each other.

Formula used

Product compliance risk score = product compliance risk severity score × product compliance risk occurrence score × product compliance risk detection score
Use the same scoring scale across comparable product compliance risk risks.

Inputs explained

Consequence severity rating:
Occurrence likelihood rating:
Detection difficulty rating:

How to use the result

Use it when triaging compliance non-conformances, prioritizing corrective actions, or building a risk register for an audit.
RPN scores are ordinal, not absolute — a score is only comparable to others built on the identical 1-to-N scale, and equal scores can hide very different severity profiles.

Current U.S. benchmarks

The producer price index for paperboard and containers stands at 276.831 (BLS, May 2026), up 8.8% from a year earlier. Quotes priced off last quarter's material cost miss this move.
The U.S. has 22,301 printing and related support establishments employing about 386,248 workers (Census County Business Patterns, 2023).

Common questions

How do you calculate a product compliance risk score? Multiply the severity, occurrence, and detection ratings. With severity 6, occurrence 4, and detection 3 the raw product is 72, which this tool scales to a 4.55 score on its normalized display.
What is a good compliance risk score? Lower is better. There is no universal threshold; teams set an action line — for example, review anything in the top quartile of their register — because scores are only comparable within one scale.
Why multiply instead of add the ratings? Multiplication makes a high rating on any single dimension dominate, so a rarely occurring but catastrophic and undetectable failure still scores high rather than being averaged down.
What is the difference between severity and detection here? Severity rates how bad the consequence is if it reaches the market; detection rates how likely you are to catch it first. A high detection rating means it is hard to catch, which raises risk.
Should I act on the highest score first? Yes, but also inspect the severity component directly — a very high severity should trigger action even at a moderate overall score, since a critical safety label defect must not be masked by a low occurrence rating.

Last reviewed 2026-05-12.