Infrastructure Management

Use the Infrastructure page [ Attack Surface ➔ Infrastructure] in the Security Posture Management application to manage your infrastructure.

Infrastructure Types

Company-Provided Assets

Infrastructure (IP addresses and CIDR blocks) provided to BitSight by a user from the organization to define their infrastructure.

Custom Subnet

A subnet of infrastructure (IP addresses and CIDR blocks) customized by users within an organization for infrastructure tagging purposes.

Guides

Guides for managing infrastructure:

• Adding Assets to Your Infrastructure
• Custom Infrastructure
• Expired Infrastructure
• Merging Entities
• Self-Attesting Guest Networks for Exclusion
• Subsidiary Relocation
• Subsidiary Removal
• Providing Context for an Uncompromised System

Tools

Finding Comments

Comment on your findings. Use comments to describe the status of resolution or validity of findings (events and records) to external stakeholders and other interested parties using the BitSight platform.

Infrastructure Tags

Tags pertaining to infrastructure, defined by the company to identify assets that belong to them.

Primary Rating

A self-published rating used to highlight a segment of network infrastructure that better reflects a company's security posture.

Self-Publish

Self-published companies consist of CIDR blocks, IP addresses, and domains that are specifically selected by the company itself, rather than curated by Bitsight.

• Requesting a Self-Published Report
• Removing a Self-Published Report

Working with Registrars and Internet Service Providers

Refer to the following instructions when working with Regional Internet Registries (RIR), domain registrars, and Internet Service Providers (ISP).

• Updating Domain Registration
• Updating IP Registration
• IP Assets from Autonomous System Number (ASN) Attributions
• Stale Registry Records

Changes are captured through an automated process.