Methodologies

Rating Methodologies

• How are Bitsight Security Ratings Calculated?
• What is a Bitsight Security Rating?
• How are Bitsight Security Ratings Calculated Within Parent-Subsidiary Relationships?
• Risk Vector Grading with Insufficient Data
• Observed Devices Thresholds for Grading Desktop and Mobile Software Risk Vectors
• Why Do Bitsight Security Ratings Fluctuate?

See all 11 articles

Risk Category Calculation

• How is the Compromised Systems Risk Category Calculated?
• How is the Diligence Risk Category Calculated?
• How is the User Behavior Risk Category Calculated?
• How is the Public Disclosures Risk Category Calculated?

Risk Vector Assessment

• Patching Cadence Risk Vector update
• How is the SPF Domains Risk Vector Assessed?
• How is the DKIM Records Risk Vector Assessed?
• How is the TLS/SSL Certificates Risk Vector Assessed?
• How is the TLS/SSL Configurations Risk Vector Assessed?
• How is the Open Ports Risk Vector Assessed?

See all 18 articles

Web Application Security Tests

• Cross-Site Request Forgery (CSRF) Mitigations Present
• Remediating CMS Administration Portal Exposed
• Determining if a HSTS Preload Directive is Present and its effect on the WAS Risk Vector
• Mixed Content Security Test and Remediation Tips
• Remediating Session Token in URL Issues
• Remediating Secure Cookie on Insecure Channel Findings

See all 21 articles

Finding Lifetime

• Lifetime by Risk Vector
• What is a Finding Lifetime?
• Why Do Findings Have a Decay and Lifetime Period?

Vendor Risk Management & Trust Management Hub Methodologies

• Calculating Questionnaire Scores
• Vendor Scoring: Trust, Impact, & Risk
• Vendor Score: Trust Score
• Default Trust Score Categories
• Vendor Score: Impact Score
• Default Impact Score Categories

See all 7 articles

Ratings Algorithm Update

• 2024 Ratings Algorithm Update
• Why is the Ratings Algorithm Updated?