How the Risk Reporting Score is Calculated
text to speech
The RiskIQ Risk Reporting Score was created to bring management, vulnerability teams, and operations staff together to understand their current and future risk and track if security is improving or deteriorating over time.
This helps CISOs to understand the effectiveness and impact of their security programs, tools and people. By tracking improving or deteriorating scores over time, the effectiveness of security programs and their costs can be calculated.
Vulnerability management staff now have a way to understand their current risks with regards to all of the organization's external facing digital assets. They can easily understand if a zero day vulnerability will affect their organization for example. Risk reporting asset information can easily be exported as a csv file to be used by operations staff to tracked remediation efforts.
Operations staff can now correct security issues knowing that active monitoring on the organizations enterprise digital footprint will automatically detect changes and update the asset information accordingly.
source
Gloss