Abstract: A system and method for providing risk score based on sensitive information inside user device is provided. The system includes a user, a computing device or a user device (e.g. a mobile phone, laptop, desktop, etc.), a risk scoring tool, a network, and a server. The risk scoring tool may be installed in the computing device 104 in one example embodiment. In another example embodiment, the risk scoring tool may be installed in the server. The method may facilitate the user (e.g. the system or the network administrator), to identify the devices in the network, which may contain the most sensitive information related to an enterprise or organization. The risk scoring tool may help the organization or the enterprise to prioritize their security and backup policy based on identification of the most sensitive user device in their network or group.