How is the Public Disclosures Risk Category Calculated?

Ingrid

The Public Disclosures risk category provides information related to possible incidents of undesirable access to a company’s data, including breaches, general security incidents, and other disclosures.

Risk Vectors

The risk vectors within the Public Disclosures risk category affect Bitsight Security Ratings in the following manner:

Risk Vector	Description
Security Incidents Overview Assessment	Only certain events impact a company's rating and only if they occur, as opposed to having a percentage of the rating dedicated to them. Unlike other risk vectors, the absence of these events do not positively affect ratings, but its presence can have a negative impact. The impact of events starts on the effective date. – “A” Letter Grade in the Absence of Events This is designed to neutralize any positive or negative impact to the risk vector.
Other Disclosures Overview	This does not currently impact the rating. It’s considered to be the least severe among the Public Disclosures risk vectors. Its impact to business continuity is minimal if they were to occur. – “N/A” Letter Grade in the Absence of Events

December 19, 2025: Updated links to open in new tab.
October 20, 2021: Ratings Algorithm Update 2021.
July 20, 2021: Release Preview and overview of the 2021 Ratings Algorithm Update now available.