The Standard BPVR default model operates in this manner.

1. The overall model works like a credit score or your SATs.  There is a base set of points for the network being operational, so you will rarely reflect a zero score within it.

2. The scores skew higher as a result.  In the scorecard, Green is 95-100, Yellow is 90-94, and Red is 89 and below.

3. Each question has a weighted value, 1 = Low Penalty, 5 = High Penalty.   This reflects the number of points that will be deducted for negative findings.

4. Best Practice, Technical Vulnerability, and Business Risk ratings each drive scoring deductions.   
For example, if a question was weighted with a 3 rating and Best Practice and Business Risk were both scored as a miss, 6 points will be deducted from the topic score.

5. All topics are averaged to create the final score.

6. You can adjust the weights in the template to meet your scoring requirements, but note that this will impact all assessments as scoring is global.