Understanding HRI Impact
Throughout Unify we surface an HRI Impact column. This article explains how it is calculated and how Human Risk Managers can use it as a reference to focus on key areas of risk.
Human Risk Index
Living Security’s HRI is a dynamic indicator of risk, based on both risky and vigilant user behaviors, as well as external threats. The HRI spans 1 to 1000, with each identity beginning at 500.
What is HRI Impact?
Throughout the tool, Unify shows the risk or vigilance that each individual insight presents in the form of HRI Impact, a numerical representation of the maximum impact a behavior or threat can have on a user's overall HRI.
How is HRI Impact calculated?
HRI Impact indicates an isolated measurement of the impact of a singular insight and measures as if it were the only factor affecting the score. This gives a relative severity of risk to each individual insight that is present for the identity or group. Some insights have high impacts on the HRI, while others have as low as 0 individual impact.
Let’s look at an example:
In this example, Johnny has an overall HRI score of 183 out of 1000, reflecting a mix of both vigilant and risky activities. The most risky insight identified above is "Malware Detected," which shows an HRI Impact of -344.
If Johnny’s ONLY observed activity were "Malware Detected" and no other behaviors or threats were present, his HRI would be calculated as follows:
500 (default score) - 344 (HRI impact of "Malware Detected") = 166 (HRI)
This means that the maximum HRI impact of "Malware Detected" on a user's HRI score would be -344 points.
Aggregate Human Risk Index
A user's HRI score is influenced by multiple behaviors and activities simultaneously. While "Malware Detected" may contribute a singular HRI Impact of -344, other behaviors and events will have their own individual impacts. The HRI model takes ALL insights into account together, and considers the categories of risk and correlations between insights to produce the aggregate Human Risk Index.
Remember: The overall score is NOT a sum of the insight HRI Impacts, but a probabilistic calculation based on risks and correlations.
Simplifying the Complexity
By breaking HRI down into a single-behavior assessment, we provide users with a picture of how specific activities influence their overall HRI score. The HRI Impact is a relative measurement, showcasing the potential consequences of individual behaviors within the context of the larger risk assessment.
Conclusion
The Human Risk Index and the associated HRI Impact indicator provide valuable insights into personal risk exposure. The HRI Impact, and its isolated evaluation of individual behaviors and threats, provides users with an understanding of the specific contributions of each activity to their overall risk profile.