Cygienic Risk Ratings
...Powered by Cygienic InsurSec Services
Trusted & Reliable Cybersecurity Risk Ratings From Cygienic.
Cybersecurity risk assessments are a collection of Algorithmic & Automation assessments that evaluate the security posture of an organization. They provide a quantitative measurement of a company's cybersecurity risk, similar to a credit rating, and can be used by stakeholders such as customers, investors, and insurers to assess an organization's overall risk profile.
Cybersecurity risk assessments are based on a range of factors, including the organization's cyber security controls, financial impacts, vendor risks, compliance & policies, as well as its vulnerability management and cyber hygiene practises. Indicators are becoming increasingly important in the current landscape of frequent cyber-attacks and data breaches, as they can help organizations better understand and manage their risk exposure, and provide a benchmark for comparison with peers in their industry.
The Cygienic assesses four key cybersecurity risk areas:
- Attack Surface Management: Cyber assessment of internet facing attack surface
- Financial Risk Quantification: Data breach & cyber attack impact cost analysis
- Compliance Risk Management: Regulatory & compliance assessments
- Third-Party Risk Management: 3rd party vendor risk management and assessments
Our cybersecurity risk ratings are a reliable and trustworthy source of information for assessing the risk profile of a business. All our ratings are aligned with industry security standards, including the *US Commerce of Trade - Principles For Fair And Accurate Security Ratings, *National Institute of Standards and Technology - NIST NVD CVE and the *Common Vulnerability Scoring System.
By aligning with these established standards, our risk ratings provide a more accurate and objective assessment of your company's security profile.
Comparable to Rating Agencies & Market Leaders
Our risk ratings, in terms of accurace and comprehensiveness, are comparable to industry rating agencies and market cybersecurity leaders.
Cyber Attack Surface
| Checkpoints | Probes | Points | Weight |
| Email Security | 6 | 25 | 11% |
| Webpage Security | 11 | 36 | 15% |
| Data Privacy | 8 | 32 | 14% |
| Systems Compromised | 5 | 40 | 17% |
| System Vulnerabilities | 8 | 59 | 26% |
| Network Open Ports | 16 | 38 | 17% |
Severity Scores
| Severity | Rating |
| 0.1 – 3.9 | Low |
| 4.0 – 6.9 | Medium |
| 7.0 – 8.9 | High |
| 9.0 – 10.0 | Critical |
Grades
| Grading | % Score |
| A+ | total points between 93-100% |
| A | total points between 85-92% |
| B+ | total points between 79-84% |
| B | total points between 73-78% |
| C+ | total points between 62-72% |
| C | total points between 55-61% |
| D+ | total points between 47-54% |
| D | total points between 40-46% |
| E | total points between 00-39% |
*U.S Chamber of Commerce - Principles For Fair And Accurate Security Ratings
As security ratings continue to mature, more organizations in the public and private sectors leverage them in making business and risk decisions. As a key piece of a robust security evaluation program, security ratings based on accurate and relevant information are useful tools in evaluating cyber risk and facilitating collaborative, risk-based conversations between organizations.
Security rating companies use a combination of data points collected or purchased from public and private sources and proprietary algorithms to articulate an organization’s security effectiveness into a quantifiable measure or score. As these ratings rely in part upon the quality and breadth of the data they use, the variety of sources and the dynamic nature of the environment create risks of producing ratings that can potentially be inaccurate, irrelevant or incomplete.
To increase confidence in security ratings, an industry-wide, common approach should: - Promote quality and accuracy in the production of security ratings - Promote fairness in reporting - Include a coordinated process for adjudicating errors or inaccuracies in reported content - Establish guidelines for appropriate use and disclosure of the scores and ratings We believe these principles will promote fairness in reporting and enhance the value of security ratings across all industries.
*https://www.uschamber.com/security/cybersecurity/principles-for-fair-and-accurate-security-ratings.
**https://www.cvedetails.com/cvss-score-distribution.php
***https://nvd.nist.gov/vuln-metrics/cvss
To arrange a demonstration of our Cygienic, please reach out to sales@cygienic.com.
