Quantify network risk from single points of failure, unsupported hardware, unpatched devices, monitoring gaps and change volume.
Each dimension is normalised against fleet size so the score is comparable between a 40-device and a 4000-device estate. Unlike a health score, higher is worse here, and the highest-weighted component names the remediation that buys the most risk reduction per unit of effort. Risk registers full of adjectives do not get funded; a weighted score with a named top contributor turns 'we should replace those switches' into a prioritised plan.
Network Risk Score
risk = SPOF density (25) + end-of-support share (25) + patch gap (20) + monitoring gap (15) + change failure rate (15).
risk = SPOF density (25) + end-of-support share (25) + patch gap (20) + monitoring gap (15) + change failure rate (15). Each dimension is normalised against fleet size so the score is comparable between a 40-device and a 4000-device estate. Unlike a health score, higher is worse here, and the highest-weighted component names the remediation that buys the most risk reduction per unit of effort.
Risk registers full of adjectives do not get funded; a weighted score with a named top contributor turns 'we should replace those switches' into a prioritised plan.
This calculator takes 7 inputs: Devices in scope, Single points of failure, Devices past end of support, Devices behind on patches, Devices under monitoring, Changes per month, Changes that fail or need rollback. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.