How is the User Behavior Risk Category Calculated?

⇤ How are Bitsight Security Ratings Calculated?

Assessment

The User Behavior risk category accounts for 2.5% of a company’s Bitsight Security Rating.

27% Compromised Systems, 70.5% Diligence, 2.5% User Behavior

Overview

User Behavior records that are older than 60 days no longer affect a company’s grade. User Behavior records are updated daily.

Learn more about finding lifetime.

Risk Vectors

User Behavior is comprised of the following risk vectors:

Risk Vector Description

File Sharing

Based on a 60-day rolling average.

Exposed Credentials

Data verification is an important part of ensuring high-quality ratings and grades.

This is an informational risk vector and does not affect security ratings.

  • December 19, 2025: Updated links to open in new tab.
  • December 1, 2023: Linked to finding lifetime resource.
  • April 19, 2023: 2023 RAU weight adjustments.
  • October 20, 2021: 2021 Ratings Algorithm Update.
Was this article helpful?
4 out of 4 found this helpful

Comments

0 comments

Please sign in to leave a comment.