The Proofpoint Attack Index is a weighted composite score that quantifies the risk posed by the threats targeting a specific user. It is not based on the user's title or permissions, but rather on the nature of the attacks directed at them. The calculation specifically incorporates the severity of the threats (e.g., phishing vs. advanced malware), the diversity of attack types, the sophistication of the attack, and the volume of threats, providing a comprehensive measure of the user's threat burden.

A. VIP status is a user attribute that may attract attackers, but the Attack Index measures the threats themselves, not the user's organizational role.

B. The number of potential attack pathways relates to a user's attack surface, not the specific threats they are actively receiving.

C. A user's group membership in Active Directory is an internal attribute, which does not directly factor into the Attack Index's threat-based calculation.

1. Proofpoint, Inc. (2020). A Proofpoint Perspective on Very Attacked People (VAP). Page 3, "The Attack Index," details the four factors used in the calculation: threat type, sophistication, attacker focus, and threat volume.