Subsidiary Attribution

⇤ Network Mapping Process

Some companies might have subsidiaries within their organization, as depicted in their ratings tree.

• Only subsidiaries that have an externally observable network footprint appear in the platform; companies that do not have a network footprint, are not represented in the ratings tree.
• Many companies can have wholly owned legal entities and subsidiaries that do not have a network footprint, which do not appear in the platform.

Subsidiary Criteria

A subsidiary is classified as a separate company when it has its own unique, non-redirecting domain and it meets any one of the following criteria:

• Wholly Owned
• ≥50.1% Owned & Publicly Verified
• 0% Owned with Statements from the Parent & Subsidiary

Once the hierarchy has been established, relevant CIDR blocks are assigned to their respective companies in the ratings tree.

Wholly Owned

The company is 100% wholly owned by the parent company; wholly owned relationships are captured in our databases as subsidiary relationships.

≥50.1% Owned & Publicly Verified

By request, companies that are ≥50.1% owned can be considered if it can be verified via a public financial statement. No communication from the rest of the organization is required. See the acceptable accounting standards.

0% Owned with Statements from the Parent & Subsidiary

An admin from each the parent and subsidiary can reach out to Bitsight Support stating the company relationship:

As the parent:

I request that {subsidiary name} to be identified as a subsidiary of {parent name} even though it is not 100% owned. I understand that this is likely to have an impact on the Bitsight rating of {parent name}.

As the subsidiary:

As the {role/job title} of {subsidiary name}, I request that {subsidiary name} to be identified as a subsidiary of {parent name}.