Use the BSI Analytics report to understand how likely an organization is to experience a data breach and which issue types drive that likelihood.
The Breach Susceptibility Indicator (BSI) is a data-driven predictor that assesses the likelihood of a security breach. It uses a machine learning model that evaluates the issue types observed for a domain over a 13-week (91-day) rolling window, along with the size of the company's digital footprint, and assigns a breach susceptibility category from Very Low to Very High. The BSI is calculated daily and matches the value shown in the Breach Susceptibility Indicator on the scorecard overview. A lower BSI means a lower likelihood of a breach.
Note: The BSI is calculated with a different model than the Security Score. Unlike the Security Score, it may not respond immediately to remediation, because it also accounts for issues that were recently remediated when their historical presence correlates with future breach risk. To learn more about BSI, see Understanding the Breach Susceptibility Indicator (BSI).
The report helps you understand an organization's susceptibility to a breach by displaying and correlating several key pieces of information across the following widgets.
You can access this report by going to Automation > Reporting Center > BSI Analytics. You can also open it from the scorecard overview by selecting View BSI Analytics in the Breach Susceptibility Indicator widget, which opens the report for that scorecard.
Global Average BSI
This widget displays the global average BSI across all scanned companies for reference. Use it as a benchmark to compare against your organization's BSI. A higher score indicates a greater likelihood of a breach. The gauge shows the score and its likelihood level, from Very Low to Very High, and the arc fills from left to right as the score increases.
BSI Score
This widget displays the BSI for the selected scorecard, along with the date the score is as of. The score reflects how susceptible the organization is to a data breach. A higher score indicates a greater likelihood of a breach. The gauge shows the score and its likelihood level, from Very Low to Very High, and the arc fills from left to right as the score increases. The date the score is as of appears below the gauge. When the report covers a single scorecard on a single day, the level matches the value shown on the scorecard overview. When it covers several scorecards or days, the widget shows their average.
Issue Types With Biggest Impact on BSI
This widget displays the issue types with the largest impact on the BSI for the selected organization. It shows how far each issue type moves the organization's BSI above or below the population baseline, which is the average BSI across all companies scored today. Together, the issue types sum to the overall score.
The widget includes the following elements:
- Current score: The organization's BSI and its likelihood band, shown with a five-segment indicator.
- Population baseline: The average BSI across all companies scored today and its likelihood band.
- Positive impact: The combined points from issue types that lower the BSI, reducing breach risk.
- Negative impact: The combined points from issue types that raise the BSI, increasing breach risk.
- Score Impact chart: A bar chart of the highest impacting issue types, with each bar labeled with its Score Impact. A solid line marks the population baseline and a dotted line marks the current score. Issue types with smaller impact are grouped into Other Negative Impacting and Other Positive Impacting rows.
- BSI equation: A summary showing the baseline plus the sum of contributions equals the current score.
- How to read this chart and Why some values are negative: Explanations below the chart of the population baseline and of issue types with a negative Score Impact.
Green bars extend left of the baseline and indicate issue types that reduce breach risk, shown with a negative Score Impact. Red bars indicate issue types that increase breach risk. Reducing the number and severity of issue types that increase risk generally lowers the BSI over time. Because the BSI is recalculated daily and considers historical patterns, changes may not appear immediately after remediation.
To export the data behind this widget, select the More options menu (...) in the widget header and select Export to CSV.
Note: Not every issue type raises the score. An issue type with a negative value pulls the BSI below the population baseline, lowering the likelihood of a breach.
Which issue types may lead to Breaches and why
This widget displays a table that provides context for each issue type that may lead to a breach for the selected organization. The table lists up to 100 issue types. To get the full dataset, select the More options menu (...) in the widget header and select Export to CSV.
The table includes the following columns:
- Issue Type: The name of the flagged issue.
- Recommendation: Suggested remediation steps to reduce exposure.
- BSI Impact: The numeric value representing the issue type's effect on the BSI.
Troubleshooting
No data available appears in a widget
If a BSI widget displays No data available, one of the following applies:
- There may not be enough data about the organization to calculate one.
- No data is available for your current filter settings. Try adjusting the date period or scorecard filters to retrieve data.