The Risk Highlights widget is on the Status dashboard (MAX > Customer portal > Status tab).
This widget highlights the number of vendors with a meaningful status update.
- Needs attention: vendors with Critical or High severity findings seen in the last 7 days.
- Risk escalating: vendors whose incident likelihood has increased since the last assessment. MAX recommends action be taken to prevent breaches.
- At significant risk: Vendors whose assessments returned a Critical or High likelihood of incident
- Active breach: vendors with the following issue findings:
- Data breach detected
- Ransomware attack detected
- Information leak finding
A user can drill down into Risk Highlights data by clicking into individual rows. This displays the vendor table filtered to vendors with matching risk statuses. Please note that a vendor may fall into several risk categories at the same time. This will be reflected in the vendor table.
By default, Active Breach status will remain in place for 30 days after the breach. Your MAX analyst may remove the status sooner, based on conversations with you, if you agree that the impact of the breach has been fully understood and managed and no further action is required. The breach will remain in vendor history and will affect their Incident Likelihood Assessment.
This widget is responsive to the global dashboard filters. If you don't see all the vendors you expect, confirm the filter is set to your preferences.