How to request access to another company's BreachRisk Assessment Details
Privacy controls in BreachRisk are very strict, but do allow companies to safely and securely share details with another company. Details beyond the BreachRisk Score cannot be shared without a company's permission.
There are four levels of access to a company's BreachRisk assessment details. For security reasons, higher levels of access, like Level 3 Technical Details Access and Level 4 Administrator Access should only be granted in cases where the two company's have a well documented and secure relationship with one another, such as with a Managed Service Provider or Managed Security Service Provider.
For most use cases, access to the BreachRisk Score or BreachRisk Report should suffice.
Request Access To A Company's BreachRisk Details
1. Navigate to the Mange Portfolio page
2. Ensure the target is in your list of companies. See Add A Company to BreachRisk Portfolio if the target is not in the list.
3. Select the invitation button adjacent to the target.
a. If there isn't an existing relationship or share request, the button will be blue and will open a form to make your request. Provide the first and last name and the official company email address for a point of contact that has the knowledge and authority to verify and attest to the full scope of cyberspace and to provide consent to view their assessment details. You'll be able to select the appropriate access level on this form. For most companies and relationships level 2, BreachRisk Report provides enough information.
b. If there is an existing relationship or a share request has already been sent, the invitation button will be grey or purple. You can still click the button. From here you can deactivate a relationship or request. If you need to make a change to your request, to update your point of contact or access level, you'll need to deactivate and send a new request.
4. If the company does not have an existing BreachRisk account, your point of contact will be automatically sent an invitation from BreachBits within 10 minutes, providing them with a unique link to register. Those with an existing account will be able to see your request and make approval within their own BreachRisk dashboard.
5. If you experience errors during this process, contact support@breachbits.com.