Industry risk and comparable breaches

The Risk tab combines the technical posture measured by the scan with your company's context: sector, size and recent breaches at similar companies. Read the grade, compare the scenarios and use comparable cases to choose your priorities.

Summary

In this lesson you open the Risk tab of the meccanicaadda.it scan: you read the Industry Risk Score, the Annual Breach Probability and the five factors, compare the two 12-month scenarios and scroll down to Recent Breaches.

Chapters

Key points

• Industry Risk Score: runs from 0 to 100 and a higher score means a better posture. The grade runs from A to F: A from 90, B from 75, C from 60, D from 40, F below 40. Meccanica Adda scores 43 out of 100, grade D:
  High Risk
  .
• Annual Breach Probability: a statistical estimate of the likelihood of a breach within a year, not a firm forecast for your company.
• The score combines five factors with fixed weights: Technical 30%, Exposure 25%, Industry 20%, Organization 15% and Breach Proximity 10%. Here too, a taller bar means a better posture. The Technical factor takes vulnerabilities, HTTP headers, TLS, DNS and cookies into account. Show Math displays the full calculation.
• Scenario Analysis - 12 Month Projection compares two hypotheses: Without action and With remediation. The legend also shows Historical trend, Expected and Industry average. It is a simulation, not an attack timetable: compare the hypotheses before you base decisions on these numbers.
• Key Risk Points describes the most likely attacks for your profile; Necessary Actions tells you where to start. These two panels are completed a few minutes after the scan ends.
• Recent Breaches lists breaches at other companies, matched by country and, when available, by sector. They are relevant cases for discussing priorities, not proof that you will suffer the same attack.

Reading a recent breach

• Each card shows the affected company and, in the coloured badge, the ransomware group that claimed the attack.
• Below you see when the breach was discovered (Discovered) and, if different, the attack date (Attacked), with a short description.
• The badge colour shows how recent the discovery is: red within 30 days, orange within 90, yellow within 180, grey if older.
• Read the descriptions: they show how the attackers got in and what they disrupted, so you know what to protect first.

Transcript

The full transcript of the video (in Italian) is in the Transcript tab of the player.

Related articles