There can be fluctuations in Bitsight Security Ratings, which coincides with the daily shifts in:
- The number of new observations.
- Adjustments when events fully decay or when records complete their lifetime and no longer impacts the rating.
The displayed rating changes in 10-point increments. However, the underlying rating is computed on a finer scale.
A rounding off method is implemented to prevent small changes in the underlying rating from impacting the displayed rating, which depends on previous values of the rating. There are different criteria for when the 10-point drops versus when the rating rises by 10 points.
Examples
The rating is presented as a 790 with an actual rating of 796:
Actual Rating Scenarios | Displayed Rating Results |
---|---|
The actual 796 rating drops to between 785 and 795. | The displayed rating remains as a 790. |
The actual 796 rating drops to between 775 and 784. | The rating is presented with a rating drop to 780. |
The actual 796 rating drops to between 765 and 774. | The rating is presented with a rating drop to 770. |
The actual 796 rating increases to 799. | The displayed rating remains as a 790. |
The actual 796 rating increases to between 800 and 809. | The rating is presented with a rating increase to 800. |
When the combined risk vectors are calculated into the rating, the subtle differences of individual risk vectors may increase or decrease the overall security rating with no visible changes to their letter grades.
- April 20, 2023: Rounding method examples for 2023 RAU.
- October 9, 2020: Updated examples and criteria for changes in rating.
Feedback
0 comments
Please sign in to leave a comment.