Security level of a computing system may be computed based on determining various security factor values for different operational aspects of the processing components. These security factor values are scaled to representative values or other types of identifiers. These security factor values may then be mapped on a security expectation scale, including taking into account the corresponding operational aspects. From this security factor value mapping, a computing system security determination can be calculated, which provides a vulnerability determination for the computing system providing information not only to the individual components, but also to the system as a whole.