Awareness Training to Engage Core Migration - Jul 2026

Service Update

Availability	July 15th, 2026
Product(s)	Awareness Training
Who's affected	Awareness Training customers

Overview

Mimecast is pleased to announce there will be minor changes to the Program Overview page as part of our planned migration for customers from Awareness Training to Engage Core. After the migration, the Program Overview page will display a new scoring model called Human Risk Score, replacing Company Risk Score. This is not merely a rename; the scoring scale, the dimensions that feed the score, and several supporting cards on the page are all being updated.

Historical Company Risk Score data is preserved after migration and remains available in the Risk Center for both viewing (Company Risk Score Trend) and export.

What's changing

• Scoring metric changes. Company Risk Score displayed a letter grade (F to A, with A representing lowest risk). Human Risk Score displays a numeric value between 0 and 10 with a descriptor (for example, "very low"). Lower numeric values indicate lower risk, which is inverted from the letter grade model.
• Scoring dimensions change:
  • Company Risk Score was calculated from the following dimensions: Human Error, Engagement, Knowledge, and Sentiment.
  • HumanRisk Score is calculated from up to five behavioral dimensions: Training, Simulated Phishing, Actual Phishing, Sensitive Data Handling, and Malware.
• Some behavioral dimensions depend on your security integrations. Human Risk Score reflects data flowing in from your connected security tools. Mimecast Email Security data, Engage phishing simulation results, and training completion data are included automatically with no additional configuration required. Signals from other categories (for example, endpoint malware detections or third-party phishing telemetry) require the corresponding integrations to be configured. Categories without connected data sources will not contribute to your Human Risk Score.
• Greater visibility into how scores are calculated. Human Risk Score is calculated in the Human Risk Command Center (HRCC), where you can drill into the specific behaviors and events contributing to each user's score, including both positive actions (such as reporting phishing), and negative actions (such as clicking a malicious link). Multi-product Awareness Training customers already have HRCC access; standalone Awareness Training customers will gain access as part of this migration.
• Historical Company Risk Score data is preserved. Your prior scoring history is retained through the migration and remains available in the Risk Center. You can view the Company Risk Score Trend on the Risk Center overview and export detail via the User Risk page for reporting continuity.
• The User Risk Summary (A/B/C/D/F distribution) and Human Error Summary cards are no longer displayed on Program Overview. Individual user risk detail remains available on the User Risk page.
• The Watchlist section is now labeled "Training and Compliance Watchlist Overview" to reflect its expanded scope.
• Translating Company Risk Score to Human Risk Score: The two scoring models are calculated from different underlying dimensions, so the mapping below is directional rather than exact. Use it as a translation aid when communicating the change to internal stakeholders.
  • Company Risk Score & Human Risk Score:
    • A: Very Low
    • B: Low
    • C: Medium
    • D: High
    • F: Very High

Because Human Risk Score uses a numeric scale where lower is better, a company previously rated "A" would appear near the bottom of the 0 to 10 range (for example, 1.9 as very low), and a company previously rated "F" would appear near the top.

Recommended actions

No administrative action is required for the change itself.

If you currently report Company Risk Score to internal stakeholders, consider the following points:

• Prepare a brief explanation of the new scoring model ahead of your migration so your audience understands the shift in how risk is measured, particularly the inversion of the scale.
• Export your Company Risk Score history from the Risk Center if you want a local record for continuity in existing reports or dashboards. To export:
  • Navigate to Reporting & Insights | Risk Center.
  • Click View Details on the User Risk card to open the User Risk table.
  • Click Export Raw Data to download an XLSX file, or click Report to generate a PDF that includes Company Risk Score alongside Employee Breakdown by Grade.

The data remains available in Engage after migration, but exporting gives you an offline reference point.

See Also...

• Awareness Training to Engage Core Migration FAQ