Data-Driven Approach to Asset Discovery and Risk Measurement

This report outlines a data-driven approach to asset discovery and risk measurement employed by BitSight Technologies. It details the importance of data quality and the methods used to collect and enrich data to provide security ratings and risk insights. The guide explains two essential concepts: data collection and mapping and attribution. It describes various data collection techniques, including passive and active methods, and emphasizes the role of proprietary technologies like Bitsight Groma and the Bitsight Graph of Internet Assets. The report highlights the significance of continuous data collection from diverse sources and the integration of customer data to enhance accuracy. Additionally, it discusses the mapping and attribution process, which is crucial for understanding the ownership and relationships of digital assets. The insights gained from these processes are critical for assessing organizational risk and improving security measures.