Scoring & Targets

Pillar targets

A Pillar Target sets the maturity level (1–5) a client is aiming for in a given pillar, for a specific engagement — set from the engagement’s Pillar Targets tab. There’s one target per pillar per engagement.

Changing a pillar’s target immediately recalculates every gap for controls in that pillar, so Gaps and the roadmap always reflect the current target, not a stale one.

Scores

Scores are computed automatically — there’s no manual “scoring” step. For each pillar or standard, the score is a weighted average of rated controls’ maturity levels (weighted by each control’s scoring weight), expressed as a percentage of the maximum (level 5):

score % = (Σ maturity level × scoring weight) / (Σ scoring weight) / 5 × 100

A few things worth knowing:

Unrated controls are excluded from the average itself, but still counted in the total so you can see completeness (e.g. “68% of scope rated”).
A pillar or standard with zero rated controls shows no score, rather than a misleading 0%.
Scores computed against a Standard use each mapping’s strength: a Full mapping counts fully, a Partial mapping counts at the fraction set in Scoring Configuration below.
Once an engagement is finalized, its scores are frozen into a permanent snapshot. Reopening this page for a finalized engagement always shows that snapshot, not a live recalculation.

Scoring Configuration

A single, firm-wide setting at /scoring-configuration (not per-client or per-engagement):

Field	Notes
Partial mapping credit	A fraction (0–1, default 0.5) — the credit a `Partial` control-to-standard mapping earns toward that standard’s compliance score. `Full` mappings always earn 100% regardless of this setting.

Changing this value only affects scores computed after the change — it never retroactively rewrites an already-finalized engagement’s snapshot.

Prioritization Weighting

Another firm-wide setting, at /prioritization-weighting, that tunes how Gaps are prioritized:

Field	Notes
Risk appetite multiplier	Default 1.00. Scales every gap’s priority score up or down.
Regulatory deadline multiplier	Default 1.00. Scales every gap’s priority score up or down.

Like Scoring Configuration, changes here only affect gaps computed going forward, not frozen snapshots of already-finalized engagements.

Next step

With targets set and scores visible, review Gaps and the Roadmap to plan remediation.