Change Severities

Change severities are used to gauge the severity of change and for setting alert thresholds, particularly for the risk vector grades, security ratings, and NIST CSF grades alert categories.

• For a Decrease and Critical Decrease, an alert is generated when the values are reached or cross below the level.
• For Increase threshold alerts, an alert is generated when the values are reached or cross above the level.

Informational

Informational risk vectors.

Slug Name: INFORMATIONAL

Increase

Indicates the company's cybersecurity risk is decreasing and their security posture is improving.

Slug Name: INCREASE

Decrease

Indicates when a company is starting to have trouble responding to security issues. Their security rating slightly decreased, so their risk started to increase.

Slug Name: WARN

Critical Decrease

Indicates the company needs to significantly improve their response times to new issues or has a history of delayed risk preparedness (low Diligence scores over time). Data breaches can cause a critical decrease in a company's security rating.

Slug Name: CRITICAL