4th Party Security Incidents Report

⇤ Reports

Overview

Identify security incidents across your monitored fourth parties to understand possible points of exposure.

Generating this Report

1. Open the Reports Page in the CM app.
2. Locate the 4th Party Security Incidents card.
3. Mouseover the card and select Create. The report is automatically generated.

This report can be downloaded as a CSV, PDF, or PNG.

Reading this Report

Tabs at the top of the report allow you to focus on specific 3rd party data. The Portfolio tab displays data from your entire portfolio. The Incidents tab summarizes security incidents in your portfolio. The Provider tab displays data related to a single breached provider.

Portfolio Tab

This tab includes three charts and two tables. You can use filters to narrow the scope of the data based on tier or folder.

The Impacted Companies Per Tier chart indicates how many companies in each tier are impacted by security incidents of each severity.

The Impacted Companies Per Folder chart indicates how many companies in each folder are impacted by security incidents of each severity.

The Impacted Companies by month/severity chart indicates how many security incidents of a given severity occurred in each month over the last year.

The 4th Party table lists breached providers and the number of portfolio companies that are dependent on them.

Selecting an entry in the 4th Party table populates the Portfolio Companies table with companies that are dependent on that 4th party.

Incidents Tab

This tab includes a chart and a table. You can use filters to narrow the scope of the data based on breached provider, dependent company, time period, category, folder, or tier.

The bar chart summarizes the incident count by severity. Click on a bar to filter the rest of the tab by severity.

The table indicates a disclosure date, impact date, severity, incident category, breached provider, and count of dependent companies.

Provider Tab

This tab includes two charts and two tables. Select a breached provider to review its impact on your portfolio.

The Impacted Tiers chart lists your tiers with impacted companies and the number of impacted companies in each.

The Impacted Folders chart lists your folders with impacted companies and the number of impacted companies in each.

The Security Incidents table lists security incidents associated with the breached provider you selected. It includes an impact date, incident category, description, and URL associated with the incident.

The Dependent Companies on your Portfolio chart lists companies in your portfolio that depend on the breached provider you selected. It includes the name of the dependent company, its tier, and its current rating.