Governance scoring model

Score structure, not just count controls

A useful governance score reflects the quality of inheritance, guardrail coverage, and consistency, not just whether policy objects exist somewhere in the tenant.

Keep the score tied to evidence

Scoring becomes more credible when the domain narrative and findings clearly explain why the score landed where it did.

Use scoring to focus conversation

The score is there to help prioritise review discussion, not to replace the underlying findings.