5.2.3. Compliance Score
💡 First Principle: Compliance score is a single numeric summary — generated from completed improvement actions inside Compliance Manager — that gives leadership a quick, comparable sense of overall compliance posture, weighted by the relative risk each control addresses rather than simply counting completed tasks equally.
Because the score is risk-weighted, completing a handful of high-impact improvement actions can move the score more than completing many low-impact ones — directing attention toward what actually reduces risk the most, the same prioritization principle behind risk management in GRC (Phase 2.1.5).
⚠️ Exam Trap: Compliance score is generated from Compliance Manager's tracked improvement actions — it isn't a separately calculated or independently sourced metric.
Reflection Question: Why might completing three high-risk-weighted improvement actions raise the compliance score more than completing ten low-weighted ones?
