Publication Date – March 28, 2022
Change severities are used to gauge the severity of change and for setting alert thresholds, particularly for the Risk Vector Grades, Security Ratings, and NIST CSF Grades alert categories.
- For a Decrease and Critical Decrease, an alert is generated when the values are reached or cross below the level.
- For Increase threshold alerts, an alert is generated when the values are reached or cross above the level.
| Severity | Description |
|---|---|
| Informational | |
 Increase |
Indicates the company's cybersecurity risk is decreasing and their security posture is improving. |
 Decrease |
Indicates when a company is starting to have trouble responding to security issues. Their security rating slightly decreased, so their risk started to increase. |
 Critical Decrease |
Indicates the company needs to significantly improve their response times to new issues or has a history of delayed risk preparedness (low Diligence scores over time). Data breaches can cause a critical decrease in a company's security rating. |