Enhanced Ratings are designed for cloud service providers (CSP) and their unique business model.
Frequently Asked Questions
- How is a CSP identified?
- Are Enhanced Ratings risk vectors weighted differently?
- Can the rest of the risk vectors still be accessed?
- How do I activate Enhanced Ratings?
- Do Enhanced Ratings impact self-published ratings?
- Do Enhanced Ratings need an additional subscription if you are already subscribed to the parent?
- What is the difference between a headline rating and an Enhanced Rating?
How is a CSP identified?
Service providers (companies that own and operate servers in various data centers) are categorized on the type of service that they offer to their customers. CSPs are the entities that mainly offer IaaS and/or PaaS services. See service provider models.
Are Enhanced Ratings risk vectors weighted differently?
The weights of Enhanced Rating risk vectors are the same. All other risk vectors are treated as if there are no observations to inform the risk vector. In practice, this means those risk vectors have the perfect grade for the Enhanced Ratings, which is a consistent treatment with other companies with no observations.
Can the rest of the risk vectors still be accessed?
Yes.
- CM App: Enhanced Ratings can be activated and deactivated from the Manage Cloud Service Providers page in the Continuous Monitoring application.
- SPM App: Users of the SPM application can access the rest of the risk vectors by displaying the enterprise entity of the CSP.
How do I activate Enhanced Ratings?
Use the Manage Cloud Service Providers page. See the instructions.
Do Enhanced Ratings impact self-published ratings?
No. Enhanced Ratings and self-published ratings are independent of each other.
Do Enhanced Ratings need an additional subscription if you are already subscribed to the parent?
One license is used to switch between Enhanced Ratings and the headline rating. Only one of them is displayed at a time within the Continuous Monitoring app. Even if you are already subscribed to the parent, you will need an additional subscription for the child entity that identifies the CSP.
An additional license can be used to simultaneously access the headline rating and Enhanced Rating within the SPM app.
What is the difference between a headline rating and an Enhanced Rating?
The headline rating is the combination of the IP-based observations from the CSP’s customer-owned assets and domain-based observations from the CSP-owned assets. These observations are based on all Bitsight risk vectors.
Enhanced Ratings excludes IP-based observations from the CSP’s customer-owned assets and includes only the domain-based observations from CSP-owned assets. These observations are based on a subset of the risk vectors. This reflects the relative performance of the CSP itself in respect to all other companies in the entire Bitsight inventory.