Glossary of Terms: Grading & Finding Behavior – Bitsight Knowledge Base

Grace Period: The time before a recognized finding starts to impact ratings.
Finding Behavior: How findings behave depending on the action taken, such as a finding is remediated.
Finding Grades: Diligence findings are graded as GOOD, FAIR, WARN, BAD, or NEUTRAL based on industry-standard criteria.
Lifetime: The number of days a finding impacts the risk vector grade, assuming nothing changes in the future and the finding is not updated with new information.
Remediated: The time it takes for a remediated finding to be shown as a new finding (replacing the old & stopping its remaining lifetime) or how long it takes for the finding to stop impacting the rating when the finding is updated.
Risk Vector Grade: The letter grade for the risk vector.
Weight: A percentage value of a risk vector towards the rating. The individual risk vectors are grouped into risk categories and are totaled into the rating.

March 26, 2024: Combined no findings & low findings and separated into insufficient data.
December 12, 2023: Low findings definition.
August 16, 2023: Published.

Related articles