What is RiskRecon?

Enjoy a complimentary cybersecurity health check with RiskRecon, powered by Mastercard—an exclusive benefit for all Cyvatar members to keep your organization secure.

RiskRecon, powered by Mastercard, is a cybersecurity assessment tool integrated into the Cyvatar platform to provide our members with a snapshot of their cybersecurity health. It’s a crucial part of evaluating how well your organization is prepared against external threats, offering valuable insights into your security posture through passive, non-intrusive analysis.

How Does RiskRecon Work?

RiskRecon operates by assessing a company based on the domain information provided. Here’s an overview of the process:

1. Domain Input & Automated Scan:

   • As a Cyvatar member, we supply RiskRecon with your organization's name along with the domain associated with the email used during registration (e.g., Nike, nike.com).
   • RiskRecon uses this input to begin an automated scan that identifies hosts associated with the domain(s). The system then carries out a passive security analysis of those domains, their hosts, and domain email servers.

2. Machine Learning & Expert Curation:

   • RiskRecon algorithms use a supervised machine learning model to discover systems related to the domain, scanning every domain host, email server, and other associated assets.
   • After the automated phase, a RiskRecon analyst curates and refines the company’s profile, ensuring comprehensive coverage, including any subsidiaries. The analyst further uses supervised machine learning to identify company and subsidiary domains and networks, building a complete cybersecurity profile.

3. Performance Summary & Baseline Establishment:

   • The analysis generates a one-time performance summary for the organization, which establishes a baseline of cybersecurity performance for the company and any associated entities.
   • This performance summary allows organizations to understand their current cybersecurity risk status and helps prioritize improvements in security practices.

How Is the RiskRecon Score Calculated?

RiskRecon rates the quality of your organization's cybersecurity using an A – F letter scale and a 0.0 – 10 numeric scale. The rating is derived from:

• Observed Issues: The number and severity of security issues identified during the assessment.
• Risk Priority: The significance of the identified risks within your environment, categorized by their potential impact.

This score provides insights into areas where your current practices align with security standards and highlights opportunities for improvement, helping you better understand and manage your risk landscape.

How Often is the Score Updated?

RiskRecon updates each company’s performance approximately every two weeks. This frequent re-evaluation ensures you stay informed about the latest cybersecurity risks and maintain an up-to-date view of your risk posture.

Benefits of Using RiskRecon

RiskRecon provides an ongoing, external perspective on your security, offering a way to:

• Understand how well your organization is adhering to cybersecurity best practices.
• Get a clear overview of vulnerabilities visible to the outside world.
• Gain insights that help prioritize security measures to reduce risk effectively.

Want to Learn More?

The version of RiskRecon available through Cyvatar provides a useful overview of your security landscape. However, for deeper insights and specific actionable recommendations, upgrading to a full RiskRecon service may be beneficial.

Need Assistance?

We're committed to supporting you on your cybersecurity journey. If you’d like more information on upgrading to a full RiskRecon subscription or need help with your next steps, our team is here to assist.

Please reach out to Cyvatar Support or schedule time with a Cyvatar Solution Outcome Advisor for personalized guidance.