The Risk Score in ZOA is designed to give some guidance of potential compliance risks. A high risk score should not be interpreted that one is not compliant or in breach with the data protection regulation. For example, if one has a data collection with sensitive personal data that is not encrypted, the risk score will show higher risk. However, this does not automatically mean that one is in breach with GDPR or other data protection regulations.
In the upper right corner of an object across categories, you find the "Risk score" in the form of a traffic light: green, yellow and red.
You can access the details of the risk score by clicking on it. This will expand the risk score and show the details on a section level to give you a better understanding.
The risk score is also shown on the "Reports" sub-page when you expand the sections.