Now manage your subsidiaries with SecurityScorecard (part of Attack Surface capability)

How can I monitor & manage my (legal) subsidiaries  with SecurityScorecard?  

Option 1 : Monitoring subsidiaries in a Portfolio

• • This suits better if your goal is to just monitor your subsidiaries (not necessarily manage them)
  • Create a Portfolio, let's say 'My Subsidiaries' and add subsidiary scorecards to monitor them.           

Option 2 : Managing subsidiaries via Hierarchy 

• • This is suitable for Common / Hybrid IT teams who are responsible for risk for multiple subsidiaries and hence need all key permissions to manage subsidiary scorecards.
  • Access to the subsidiary scorecards is still dependant on them being followed, same as for any other scorecard.
  • Pre-requisite is to first get your subsidiary scorecards updated under Hierarchy Tab [Login to SSC >> Go to 'My Organization' in top navigation >> Go to 'My Scorecard' >> Click Hierarchy]
  • Submit support ticket here to get your hierarchy updated. 
  • Once Hierarchy is updated, then 'Customer Admin' in Parent Scorecard will have access to following permissions for their subsidiary scorecards
    1. 1. View issue evidence and submit remediations
       2. Add missing assets via digital footprint 
       3. Move assets between subsidiaries via digital footprint 
       4. Comment on issue findings and make it public 
       5. View Attack Surface for your Subsidiary