Scoring
Domain weighting
How the three scored domains combine, and the rule that stops the published weights ever describing a calculation that was not performed.
The weights
| Domain | Weight |
|---|---|
| Security | 0.5 |
| Resilience | 0.3 |
| Cost | 0.2 |
Why security carries half
It is the domain with the most consequence and the widest evidence base. The overall band is additionally floored at the security band, so the overall position can never be better than security.
The rule that keeps the weights honest
The overall score is calculated only when every offered domain was scored. A missing domain withholds the overall rating rather than causing re-basing across the remainder.
Re-basing would mean the pack printed 0.5, 0.3 and 0.2 while performing a calculation that used none of them.
What it does not mean
The weights are not a claim about which domain matters most to your organisation. They are a published, fixed methodology choice, applied identically to every assessment.