Entity risk ratings differ between product versions

Products

• Information Centric Analytics

Issue/Introduction

Users are assigned a risk score in Information Centric Analytics (ICA) 6.5.x and a different score in version 6.6.

Environment

Release : 6.x

Resolution

The apparent discrepancy between risk scores between product versions is caused by the new risk scoring algorithm introduced in 6.6. The new algorithm has been altered to provide a bounded absolute score instead of a percentile-based score. The goal of the new algorithm is to score entities such that those scores can be used as part of a policy enforcement strategy. In the new approach to User Risk Scoring, risk is defined as a measure of the likelihood of an entity getting a score for a particular vector, compared to what the impact of scoring on that vector means.