Skip to main content
Security Performance Management
Continuous Monitoring
Vendor Risk Management
Cyber Insurance
National Cybersecurity

Portfolio Performance Report

Ingrid

The Portfolio Performance report provides insight into the level of cyber risk exposure introduced to companies in your portfolio.

  • Get a clear place to start for your risk reduction efforts.
  • Identify high-risk areas and focus your resources on areas that pose the greatest risk.
  • Prioritize resources towards achieving a significant and measurable reduction in cyber risk.

To request access to this report, contact your Bitsight Customer Success Manager or Account Manager.

Using the Report

Go to the Reports page or expand the Reports dropdown in your portfolio to generate a Portfolio Performance report. New data (added folders, vendors, etc.) that are added to this report will be available on the following day.

Tabs:

Portfolio Performance

Filters:

  • Folders
  • Industries
  • Tiers
Field Description
Third Party Portfolio Summary Shows the number of companies that make up your portfolio and the median security rating of these companies.
Distribution by Industry

Shows the top five industries that comprise the majority of your portfolio and their distribution among the rating categories (advanced, intermediate, and basic). Quickly identify key areas of your third party ecosystem to focus on, including:

  • The industry grouping with the lowest security ratings.
  • How many of your third parties have experienced a recent security incident.
  • Infections and vulnerabilities among your third parties.
Most Positive Movement An aggregation of vendors that have seen the largest increases in security ratings during the last six months. Quickly see the number of companies for each of the difference amounts.
Most Negative Movement An aggregation of the vendors that have seen the largest drop in security ratings during the last six months. Quickly see the number of companies for each of the difference amounts.
Top Infections

Highlights the most prominent infections in your portfolio.

  • The name of the infection.
  • The number of affected companies.
Top Vulnerabilities

Highlights the most prominent vulnerabilities in your portfolio.

  • The name of the infection.
  • The number of affected companies.
Companies with Security Incidents [%] View the number and percentage of vendors in your portfolio that have experienced a security incident during the last six months.

Security Incidents

See all Security Incidents affecting companies in your portfolio.

Filters:

  • Companies
  • Folders
  • Tiers
  • Time Period
  • Severity
  • Public Disclosure (Incident Type: Breach or General)
Field Description
Public Discovery The earliest date when information pertaining to the security incident became publicly available either via news sources or filing with regulatory bodies, when an incident was self-discovered & the date of discovery publicly available, or the date when affected parties were notified. Learn more…
Effective Date The date when a Security Incident event was recorded in the Bitsight platform. Learn more…
Impacted Company The company in your portfolio that was party to the Public Disclosure event.
Severity The severity of the event, which is determined by the number of points lost from the rating.
Public Disclosure The incident category: Breach Security Incident, General Security Incident, or Other Disclosures.
Category The incident type: Breach Security Incident, General Security Incident, or Other Disclosures.
Source The verifiable news source of the event.
Description A summary of the event.

Rating Movement

The rating changes of the companies in your portfolio.

Filters:

  • Time period (1 month, 3 months, 6 months, 12 months)
  • Folders
  • Tiers
Field Description
Integer (△) The changes in the company's rating during the set time period; The difference between the previous and current ratings.
Name The name of the company.
Tiers The tier of the company.
Previous Rating The rating of the company at the beginning of the set time period.
Current Rating The current rating of the company.
  • October 19, 2023: Redefined Security Incident severity and linked to resource.
  • July 20, 2021: Added new data availability/sync behavior, “New data (added folders, vendors, etc.) that are added to this report will be available on the following day.”
  • December 10, 2020: Security Incidents and Rating Movement tabs.

Related articles

Feedback

0 comments

Please sign in to leave a comment.