The RAV is a measurement for the attack surface of an environment as defined by the OSSTMM (Open Source Security Testing Methodology Manual). It is a scale which describes the security level at a certain point in time (actual security). A RAV of a 100 (also sometimes referred to as 100% RAV) reflects the perfect balance between protection and attack points. Anything less is too few controls and therefore a greater attack surface.
