Infrastructure Change Types

Security ratings and the associated findings (events and records) are affected by changes to a company’s infrastructure (owned assets (IP/CIDR/domain). There may be changes to security ratings and reports, depending on how a company’s infrastructure is managed. Some of these changes may result in a history refresh.

Refer to the following change types:

Addition

Change Description: Infrastructure that has never been attributed to the company in the past is now attributed to the company.

Attribution: The findings are attributed to the company from the moment of discovery and attribution. The security rating will be impacted going forward.

Expiration

Change Description: An end date (indicating when the asset becomes offline) was added for a piece of infrastructure that previously had no end date set.

Attribution: The findings are no longer attributed to the company upon the date of expiration and onwards.

Ownership Change

Change Description: The infrastructure has moved from one report to another within the Ratings Tree of the organization.

Attribution: The findings will no longer be attributed to the previous owner and will start being associated with the new owner of the report within the Ratings Tree.

Removal

Change Description: Infrastructure that was present in the prior day is no longer present. The removal is marked with an end date.

Attribution: The findings are completely and historically removed. The security rating is adjusted.

Renewal

Change Description: Infrastructure that had been previously end-dated has been re-attributed to the company as of the start date.

Attribution: The findings on this infrastructure are attributed to the company again as of the shown start date.