Bitsight Data

Risk Category: Compromised Systems

• Compromised Systems Risk Category
• Botnet Infections Risk Vector
• Spam Propagation Risk Vector
• Malware Servers Risk Vector
• Unsolicited Communications Risk Vector
• Potentially Exploited Risk Vector

Risk Category: Diligence

• Diligence Risk Category
• SPF Domains Risk Vector
• DKIM Records Risk Vector
• TLS/SSL Certificates Risk Vector
• TLS/SSL Configurations Risk Vector
• Open Ports Risk Vector

See all 22 articles

Risk Category: User Behavior

• User Behavior Risk Category
• File Sharing Risk Vector
• File Sharing Categories
• Exposed Credentials Risk Vector

Risk Category: Public Disclosures

• Public Disclosures Risk Category
• Security Incidents Risk Vector
• Other Disclosures Risk Vector
• Bitsight Security Ratings Correlate to Breaches
• Marsh McLennan Study: Correlation Between Bitsight Analytics and Cybersecurity Incidents

Assets

• Asset Importance

Legacy Bitsight VRM & Bitsight VRM Details

• Artifacts
• Finding Criticality
• Vendor Scoring: Trust, Impact, & Risk

Collaboration & Connections

• Collaboration Reasons
• Collaboration Status
• Connection Email Templates
• Vendor Connections

Control Insights Data

• Insights to Control Framework Mapping

Delegated Security Controls

• Delegated Security Controls Overview
• Findings Impact of Delegated Security Controls
• How Companies with Delegated Security Controls are Identified
• How Companies with Delegated Security Controls are Presented

Infrastructure Data

• Company Provided Assets: Messages, Reasons, & Statuses
• Control and Responsibility for IP Addresses and Domains
• Normalization

Glossaries

• Diffie-Hellman Primes and Keys
• Forms of Attacks
• Fourth Parties
• Glossary of Terms
• Glossary of Terms - File Sharing
• Glossary of Terms - Public Disclosures

See all 30 articles

Network Map & Company Information

• Company Relationships
• Company Request Statuses
• Company Requests
• Comparison Company Filters
• Fourth Party Data Collection Methods
• History Refresh

See all 18 articles

Findings

• Risk Categories: Overview
• Compromised System Destination IP Disclosure Policy
• Finding Behavior
• Rating Details
• Infections Panel
• Rating Related Risk Panel

See all 43 articles

Finding Messages

• SPF Domains Finding Messages
• DKIM Records Finding Messages
• TLS/SSL Certificates Finding Messages
• TLS/SSL Configurations Finding Messages
• Open Port Finding Messages
• Web Application Header Finding Messages

See all 12 articles

Classification Methods

• Botnet Infections Finding Considerations
• Spam Propagation Finding Considerations
• Malware Servers Finding Considerations
• Unsolicited Communications Finding Considerations
• Potentially Exploited Finding Considerations
• TLS/SSL Configuration Finding Considerations

See all 11 articles

Findings Data Collection Methods

• Crawlers
• Requesting a New Vulnerability
• Compromised Systems Events Proven to be Originating from Testing Environments
• Threat Research Process
• Reporting a Public Disclosures Event
• Data Collection Methods Overview

See all 26 articles

Service Provider Details

• Bitsight for 4th Party: Business Functions and Their Risks

Standards & Authorities

• Accepted Accounting Standards
• Certificate Authorities
• Regional Internet Registries (RIR WHOIS)
• TLS/SSL Certificate Best Practices
• Web Application Header Configuration Requirements
• Web Application Headers: Required & Optional Headers

Trust Management Hub Data

• Trust Management Hub Document Types

Vulnerabilities & Infections

• Apache ActiveMQ Remote Code Execution [CVE-2023-46604]
• Apache HTTP Web Server Resource Center
• Apache Log4j Resource Center
• ArcaneDoor Vulnerabilities [CVE-2024-20353, CVE-2024-20359]
• Atlassian Confluence Data Center and Server Template Injection [CVE-2023-22527]
• Atlassian Confluence Data Center and Server [CVE-2023-22515]

See all 65 articles