Which feature of classic risk scoring is frequently configured by customers?

• A. Annualized Loss Expectancy
• B. Risk Criteria Matrix
• C. Control Failure Factor
• D. Indicator Failure Factor

Answer: (B)

The Risk Criteria Matrix is the feature customers most frequently configure in classic risk scoring. It defines how likelihood and impact are translated into an overall risk level, such as low, medium, high, or critical. By adjusting the matrix, organizations tailor risk ratings to their risk appetite, thresholds, and escalation rules, ensuring that what counts as a high-risk item reflects their business context and priorities. This customization directly shapes how risks are prioritized and remediated across the portfolio.

Other options relate to different aspects or methods of risk assessment. Annualized Loss Expectancy comes from quantitative frameworks and isn’t the usual customization focus in the classic matrix-based scoring. The Control Failure Factor and Indicator Failure Factor are inputs or components within risk calculations but don’t define the primary scoring mechanism that organizations customize most often.