Overview of the CyberScore KPI
Learn more about how your CyberScore is determined
Your CyberScore is like your credit score but for your cyber security and is the leading indicator of your organisation’s cyber security posture.
Calculated and delivered to you in real-time based on best practices from NIST Cyber Security Framework, ISO 27001 and UK Cyber Essentials Plus standards, and augmented with our experienced security engineers trained in offensive security, our algorithms blend the best of both worlds to deliver you an accurate measure which you can understand and do something about.
We believe transparency is essential, so we provide you with the drilldown so you can understand how your CyberScore has been derived.
How do I read my CyberScore
Quantitative – your actual score represented as a single number between 0 and 100, you know exactly what your score is – no fluffy stuff for you to learn before understanding what your CyberScore is.
Qualitative – having a number attributed to your cyber security is helpful, but it doesn’t mean much without a reference point. We provide qualitative values to help you understand if this is good, bad or indifferent with values of Dangerous, Poor, Good and Excellent.
Click on Score Details to see more:
Clicking on Score Details will open a detailed breakdown of your CyberScore composition. You can also see an overview of the data retrieved from each technology by clicking on the arrow to the right to expand that field:
How do I Drive my CyberScore?
By connecting your cyber security tools.
HighGround is designed to synchronize the security data from your various cyber security tools in real-time. From here, data is aggregated from the various tools and scored continually to give you the most up-to-date data as possible. If you are missing tools or technologies, you can always visit our Pricing Calculator to get an idea of what it will cost to address the shortfall.
What effects my CyberScore?
There are many elements that can impact your CyberScore. These are the main ones:
- Poor health in your current security tools - for example, your endpoint protection identifying that you have malware on a computer which could not be cleaned.

- Missing Tools/technology – if you don’t have a technology at all you will receive the maximum reduction for this on your CyberScore to reflect a gap in your cyber security.

-
Your CyberCompliance – if you don’t manage your Cyber Compliance and/or let it go out of date, for examplefailing to have an Incident Response Plan or not performing a Cyber Risk Assessment when it is due.
- Keeping your CyberCompliance healthy will not Improve your CyberScore but not maintaining it will reduce your CyberScore as this reduces your ability to Identify risks, respond to and recover from cyber security incidents, maintain alignment between the businesses direction and the cyber security, and regularly audit key technical controls which would otherwise go unmanaged.

How do I maintain awareness of my CyberScore?
It is essential that you are continually aware of your CyberScore and any changes to it. That’s why we make it easy for you to get on with your many other priorities safe in the knowledge that when something changes, we will let you know.
You have 4 options for staying up to date of your CyberScore:
-
WebApp – you can login to highground.io and check your cyber security at any time.
-
Mobile App – you can open the HighGround app on your phone or tablet at any time.
-
Push Notifications – when your CyberScore changes, you will be notified in alignment with your notification preferences, defined by your both your organisations global administrator and yourself.
- Cyber Reports – configure email reports on a regular basis or login to the WebApp and send them manually. Note: only accounts with a Pro subscription can schedule their cyber reports – Freemium users must login to at highground.io and send these manually.