← Product

Risk Scoring

Not all compliance gaps are equal. A missing customer identification procedure carries vastly more risk than a missing record-keeping timestamp. AuditDSS scores every gap across four risk dimensions so you know exactly where to focus.

AuditDSS Risk Landscape showing 4-axis risk score distributions across obligations

Risk Landscape — distribution of all four scoring axes across obligations

Four dimensions of risk

Each axis captures a different aspect of regulatory risk. Together, they produce a composite score that reflects the true priority of each gap.

Obligation Weight

Axis 1 — Structural importance

How critical is this obligation within the regulatory framework? Measured by structural position in the obligation graph, number of dependent obligations, and regulatory category significance.

Customer identification 75
Record keeping format 32

Violation Likelihood

Axis 2 — How often is this breached?

Probabilistic estimate of how likely this obligation is to be violated, derived from enforcement patterns, category-level breach rates, and structural complexity of the obligation.

Transaction monitoring High
Entity registration Low

Enforcement Evidence

Axis 3 — Real regulatory action

Has the regulator actually enforced this obligation? How frequently? What penalties resulted? Calibrated against real enforcement actions, penalty amounts, and international assessments across 21 jurisdictions.

Regulations indexed 320
Jurisdictions covered 21
Obligations mapped 146,445

Cascade Depth

Axis 4 — Blast radius

How many other obligations depend on this one? If this obligation fails, how far does the failure cascade through the regulatory graph? Measured using Bayesian propagation through the dependency network.

Example cascade: Customer identification failure
CID fails CDD ECDD +12

One gap cascades to 15 dependent obligations

Composite risk score

The four axes combine into a single composite risk score per gap. This gives you a clear, defensible priority order — fix the gaps with the highest composite scores first.

Band D Score < 30 — Low priority. Address in next review cycle.
Band C Score 30-54 — Medium priority. Plan remediation within 90 days.
Band B Score 55-79 — High priority. Immediate action recommended.
Band A Score 80+ — Critical. Remediate immediately.
Sample Assessment Summary
Customer identification 85.3
Transaction monitoring 62.1
Record keeping 38.4
Registration maintenance 18.7
4 gaps found across 12,278 rules Overall: Medium Risk

See it in action

Risk scores surface everywhere — from the executive summary to the detailed priority stack.

AuditDSS Risk Radar and Priority Stack showing scored compliance gaps

Risk Radar and Priority Stack

AuditDSS Executive Summary showing composite risk scores and band ratings

Executive Summary with composite scores

Know which gaps matter most

Stop treating all compliance gaps as equal. Get a risk-scored priority list based on real enforcement data.