How the risk indicator works

Two rules that always hold

1. Every result is explainable. A member is never marked elevated or high without a list of concrete reasons an admin can read and act on.
2. The score only rises with signals. More overdue modules, more failed quizzes or longer silence can only raise it. Nothing hidden lowers it.

The six signals and their points

The score adds up six signals Varhugi records during training anyway. The cap is 100 points.

Required modules past their due date10 points each, capped at 30

Plus 10 points once any of them is more than 14 days late and another 10 past 60 days. A module the member is exempted from after leave counts as done.

Repeated failure on the same required module15 points at 2 failures, 25 at 4 or more

Only the module with the most failures counts, and only if it has not been passed since.

Oldest pass going stale10 points after 335 days, 20 after 395 days

Measured on the oldest required module the member has passed. Eleven months is the early warning, thirteen months is past the annual re-certification.

No activity10 points after 30 days, 15 after 90 days, 20 if never started

Counts only once the member has been in the workspace for at least 30 days and has required work outstanding. New hires get that time in peace.

Refresher past its due date15 points

An open refresher not completed on time is a missed follow-up on a known incident.

Refreshers in the last year10 points each, capped at 20

Refreshers an admin sent in the last 365 days, completed or not. Automatic annual refreshers do not count; they are routine, not incidents. This is the incident history itself: someone who has needed two refreshers is a different risk from someone who never needed one.

The three bands

Low risk

0 to 14 points

No signal, or a single mild one. Not shown separately in the member list.

Elevated risk

15 to 39 points

One clear signal or several mild ones together. Shown in the member list and the dashboard overview.

High risk

40 points and above

More than one signal, or one serious one. At the top of the follow-up list.

Who is assessed

• Only active members: those who have joined the workspace and are not marked on leave. Others show "not assessed" rather than a misleading "low".
• Which modules are required for each person is resolved exactly as in the overdue views and the audit report, so the indicator can never disagree with them.
• A department manager sees only their own department. An admin sees the whole company.

Worked example

Three fictional members, scored with the rules above.

What the indicator is not

It is not a grade on the person and not a measure of competence. It is not shown to the employee, only to admins and department managers. It triggers nothing automatic today; it points the admin to where training needs follow-up, and the admin decides.

Data protection

The indicator is computed from training data Varhugi already processes under the Data Processing Agreement: due dates, quiz results, time of last activity and refreshers. No new data is collected and nothing is fetched from outside the service. The score is calculated on each view and not stored as a separate record about the member.