The Diligence risk category assesses the steps a company has taken to prevent attacks, their best practice implementation, and risk mitigation (e.g., server configurations) to determine if the security practices of an organization are on par with industry-wide best practices.
Navigation Options
Use the context switcher to select an entity, and then go to:
SPM App: Risks ➔ Findings
- Select a company from your Companies List.
- Go to
Vendor Risk ➔ Findings
- Select a company from your Companies List.
- Go to
Client Risk ➔ Findings
The Bitsight API is also available.
Finding Details
Details vary depending on the risk vector. See details for:
- SPF Domains
- DKIM Records
- TLS/SSL Certificates
- TLS/SSL Configurations
- Open Ports
- Web Application Headers
- Patching Cadence
- Insecure Systems
- Server Software
- Desktop Software
- Mobile Software
- DNSSEC
- Mobile Application Security
- Domain Squatting
| Field | Description |
|---|---|
| Assigned To | The user assigned to remediate the finding. |
| Grade | The finding grade.
This does not apply to Compromised System and User Behavior risk vectors, which are graded as N/A. |
| Refresh | The refresh status. |
| Remediations | The name of the issue(s) a finding has, details about the issue(s), and remediation instructions information if applicable. |
| Remediation Status | Your current progress on remediating findings.
|
| Status History | A history of Issue Tracking for Remediation changes for a finding:
This section will not appear if the status has never been updated. |
| Status Updated | The date when the “Remediation Status” or “Assigned To” fields were last changed. |
April 8, 2021: Published.
Feedback
0 comments
Please sign in to leave a comment.