@Community Alums the wording of your question is a little odd.

Based on your screen shot you are not using advanced risk assessments. These fields in this screen shot are only visible if you have not migrated to Advanced Risk.

   --- This involves not only installed the Advanced Risk application, but also setting the system property to migrate to advanced risk. When you do that these fields are hidden and the risk score is presented differently.

If you are asking why the calculated scoring is being filled in, that is probably because of a business rule that is running a script include. I'm not sure of the exact business rule. There is also an on-demand training on Classic Risk Assessment. This is a free course and last less than an hour. https://nowlearning.servicenow.com/lxp/en/governance-risk-and-compliance/grc-classic-risk-assessment...

If you are asking where are formulas that do this calculation - then I suggest you look at the business rules on the sn_risk_risk table. Those will probably lead you to the right script include. Or you could browse all the script includes that are part of the GRC: Risk Management scope