Skip to main content

User Knowledge Base

Companies

The Companies page shows all the vendors, suppliers, and third-party companies you configured for BlueVoyant analysis and monitoring as part of your Cyber Risk Service. You can see the Risk Score, portfolios, findings, and risk tolerance status for each company.

image96.png

Each third-party company has a Company Profile in your Client Portal.

To open a company profile, click the company name.

Set Filters on Companies

To apply filters in Companies, click Filters. Select the filters to apply.

image97.png

Filter

Description

Values

Score

See the companies with the selected risk scores

  • Low

  • Moderate

  • High

  • Critical

Company

See the findings in the selected companies.

See Findings and Company Filter

ID

See the companies with the selected ID (useful if company names are too similar).

See ID Filter

Attributes [a]

See the companies with the selected attributes.

See Attributes

Portfolio

See the companies in the selected portfolios.

See Portfolio Management

Status

See the companies with the selected status.

  • Active

  • Under Review

  • Waiting for Approval

  • Escalation In Progress

  • Remediation In Progress

Exceeds Risk Tolerance

See the companies that exceed or do not exceed the risk threshold that you configured.

  • Select All – Show all companies.

  • Yes – Show companies that exceed your risk threshold.

  • No – Show companies that do not exceed your risk threshold.

Responsiveness

See the companies based on their responsiveness.

  • Responsive – Show responsive companies.

  • Unresponsive – Show unresponsive companies.

Sector

See the companies in selected industries, from the North American Industry Classification System (NAICS). BlueVoyant identifies the NAICS code for a company when it calculates the footprint.

See https://www.naics.com/search/

[a] Note If you cannot see the Attributes filter, you can request the Attribute service from your BlueVoyant project manager or CSM.

Company Filter

Filter the list of companies that you monitor, to see only those you select.

To add a company to the filter:

  1. Click Filters and then Company Name.

    image98.png

  2. Click Select Value and enter three or more characters of the company name.

    image99.png

  3. From the matched names, select the companies to show.

    image100.png

    See the selected companies in the Companies list. Do the steps again to add more companies to the filter.

To remove a company from a filter, click the X next to the company name.

image101.png
ID Filter

Show the company with a selected ID.

Note

  • This filter is available only if you requested this service.

  • The name of the filter that you see may be different from ID, if you requested that the ROC configure it with a custom name.

On request, the BlueVoyant ROC can give an ID to each of your third-party companies that you monitor and enable the ID filter field. This helps you more easily find a specified company and its findings.

The ROC can also give unique IDs to departments or divisions in one third-party company.

Other IT management systems in your organization can use this entity ID for internal procedures.

The ID helps if:

  • Your company monitors may third-party vendors and suppliers, and the Company Name list is too long to select the correct one.

  • Multiple company names are almost the same, and it is not easy to select the correct one in the Company Name list.

  • Company names have non-Latin characters that you cannot enter.

If the ROC escalates a finding with the Entity ID, they include the ID in all emails for this case. Your internal systems can identify the ID and the correct third-party entity.

When you enable the ID Filter, it shows on Companies and Findings.

To add an entity ID to the ID filter:

  1. Click Filters and then ID (or your custom name for the ID filter).

    image102.png

  2. Click Select Value and enter three or more characters of the ID.

    image103.png

  3. From the matched IDs, select the companies to show.

    image104.png

    Note

    If you see multiple IDs for one company, that company has IDs for departments or divisions.

    See the selected companies in the Companies or Findings list. Do the steps again to add more companies to the filter.

To remove a company from a filter, click the X next to the entity ID.

Close button for ID Filters
Attributes

An attribute is a tag assigned to a company to make granular, custom filters. You can create attributes, or you can request that the ROC creates attributes for you.

Attribute filters are on Action Plan, Companies, and Findings. All Client Portal users and the ROC (if you request it) can create and change attributes.

For example, you can create a “Pending Review” attribute and apply it to companies that your organization may choose to work with. This makes it easy to compare the risk scores and escalations, to select the best option for your organization.

To remove an attribute from a company:

  1. Select the checkbox of one or more companies.

    CompaniesCheckbox

    1. To select the companies you see in a filtered view, click the checkbox in the column header.

      Select All Checkbox

      This selects all monitored companies, which is not effective for attributes.

    2. In the Select Options window that opens, select Only select the companies displayed on this page and then click Confirm Change.

      image108.png

  2. Click Edit Attributes, which is available after you select a company.

    Edit Attributes button

    The Edit Common Attributes window opens and shows attributes that are on all the selected companies. It does not show attributes that on some but not all of the selected companies.

    image111.png

  3. Click the X of the attribute.

  4. Click Done.

To add an existing or new attribute to the selected companies:

  1. In the Edit Common Attributes window, click the image112.png plus.

  2. In Apply or Create Attribute, enter the name of the attribute. As you enter characters, matched attributes show.

    • If the attribute exists, select it.

    • If the attribute does not exist, no matched attributes show. You will create a new attribute.

    image113.png

  3. Click Apply.

    You can add more attributes.

    Note

    Attribute names are not case-sensitive. If you enter a name and there is a matched attribute, but you do not select it before you click Apply, this error shows:

    Duplicate attributes, regardless of case, are not supported.

  4. Click Done.

Add a Company to Monitor

Before you start: In this procedure, you can create an entity ID for the company that you to your monitored companies. If you choose this, see your organization's guidelines for ID syntax, or see the IDs you have.

Important

Restricted Entities are telecoms, hosting companies, cloud providers, and universities that let their customers access the internet through their infrastructure as a function of their business, or allocate or lease IP space for their customers to use.

This can make it a challenge to set network boundaries between the corporate infrastructure and the customer infrastructure, and to configure security of the company versus that of its customers.

To maintain accuracy and to prevent the escalation of false positives due to unclear ownership of IP space, BlueVoyant restricts these organizations for monitoring. Talk to your BlueVoyant project manager or CSM.

To add a new company to your monitored companies:

  1. Open Companies and then click the plus (+).

    Add company button on Companies page

  2. In Add Companies that opens, select Search by Name or Search by Domain.

    Add Company search options

    Note

    If you search by domain, you must enter the top-level domain name and the domain extension. For example, a search for abc.com will return ABC, Inc. A search for go.com will return go.com of Disney and abc.go.com of ABC, Inc.

  3. In the search field, enter three or more characters of the name or domain and then click the Search button.

    Add Company Search button

    Matched companies show in the results.

    image119.png

    If the searched-for company is not in the results, there is no footprint for that company. Talk to your BlueVoyant project manager or CSM to request a footprint for this company.

  4. Select the company and then click Add Company.

    Add Company page Add Company button
    image121.png

  5. In the Add Company for Monitoring window > Portfolio, select Supply Chain Defense (standard portfolios) or High Volume Monitoring (added purchase service for portfolios).

    In the selected section, click Assign to Portfolio and select a portfolio.

  6. Optional: Enter a new, unique entity ID for this company.

  7. Optional: Enter attributes for this company.

  8. Click Add Company.

    image122.png

Note

It may take up to a day for escalations for this company to show.

Troubleshooting: If there are issues, you may see the Unable to Add Company message.

image123.png

If you see this, contact the ROC at:

Remove a Company from Monitoring

Users with permissions (see User Management) can remove a selected company, or group of companies, from monitoring.

To remove a company from your monitored companies:

  1. In Companies, select the companies to remove and then click circleButtonCrop.png (Remove).

    checkboxesAndButtonAnnotated.png

  2. In the window that opens, review how many companies you selected, and if correct, click Confirm Change.

    remove company confirmation
In this section:

During the onboarding process, your organization gives a list of third-party vendors and suppliers, which are mapped to a set of portfolios to show in the portal. Portfolios are used to manage and prioritize vendors as a group, for risk tolerance or your definition of what is important to your organization.

An identified cyber risk detected in an organization footprint.

attributes

Your defined risk level at which a finding is escalated. During the onboarding process, your BlueVoyant CSM will cooperate with you to select your first risk thresholds for the ROC to use. BlueVoyant expertise will recommend thresholds, which include zero tolerance findings to which BlueVoyant experts immediately respond regardless of defined thresholds.

Your data remaining on the Internet from your business actions: registered IP address space, internet hosting, and network assets with external access. This is required for the TPRM Service to identify and analyze your risk posture.

Specialized service of BlueVoyant team experts who enhance TPRM.

entity

An attribute is a tag assigned to a company to make granular, custom filters. You can create attributes, or you can request that the ROC creates attributes for you.

entity

The process by which a finding that exceeds your risk threshold is sent by the BlueVoyant ROC to you or to the vendor for remediation. During the onboarding process, you select who will engage with third-party vendors: BlueVoyant or you.