RiskRecon Cybersecurity Risk Rating Model by RiskRecon is a leading provider of cybersecurity risk ratings. It automatically assesses cybersecurity risk performance based on the prevalence and severity of issues and the value at risk in the systems. RiskRecon Cybersecurity Risk Rating Model provides insights into the health of digital ecosystems, enabling better understanding and action on organizational risks. It is used by third-party risk teams for vendor selection and accountability, M&A teams to assess acquisition targets for cybersecurity liabilities, internal security analysts to gain a holistic understanding of their internet risk surface, and CISOs and boards to benchmark their cybersecurity performance against peers. The model prioritizes issues based on severity and the value at risk, yielding a risk-responsive model with useful ratings and actionable insights. A new white paper details the rating model, including the rating math, methodology, and scale. The update to the model includes performance rating distributions for several industries and example third-party risk portfolios. The user interface has also been updated to accommodate the new rating model.
