Change Risk Score

The Change Risk Score is a lightweight, second-opinion sanity check for change managers and CAB chairs. Paste a short description of the change, pick the planned implementation date, and choose the region it will run in. The tool scores the request client-side against a bundled snapshot of the signals a mature CAB already tracks: Microsoft's current Patch Tuesday load (critical vs. important CVEs), the last two weeks of additions to the CISA Known Exploited Vulnerabilities catalog, the products whose vendor support is about to lapse, and the calendar windows in which most enterprises voluntarily freeze non-emergency changes. Nothing leaves the browser — the result page is shareable because the inputs are packed into the URL hash. Use it before a meeting to prioritize which changes deserve deep review, or after a change to sanity-check whether a Sev-1 was foreseeable. It is a heuristic, not a compliance control; treat the score as an input to your CAB conversation, not a substitute for one. Data refreshes nightly.