Individual Third Party Dashboard

A third party's dashboard brings together everything StyxView knows about one third party. To open it, select the third party's name under Third Party Risk in the sidebar, or select its row on the Third Parties page. While you are on its pages, the third party's name and logo appear in the top bar.

The third party's entry in the sidebar also holds its other pages: "Overview" (this dashboard), "Risk Score", "Assets", "Risks" (including its "Risk Register" and the detection pages such as "Data Leakage & Dark Web Detection" and "Lookalike Domains"), and "Documents".

The sidebar with "Third Party Risk" expanded and one third party's entry open, showing "Overview", "Risk Score", "Assets", "Risks", and "Documents".

Under "Risks", the third party's detection pages are "Asset Reputation", "DNS Health Issues", "Network Security", "AppSec and Vulnerabilities", "TLS/SSL Certificate Issues", "Data Leakage & Dark Web Detection" (with "User Accounts", "Mentions", and "Breach Disclosure"), and "Lookalike Domains". Each lists the third party's findings the way the Company Protection page of the same name lists yours.

A third party's "Assets" page on the "Hosts" tab, listing its hosts, with tabs for its domains, email records, certificates, and fourth parties.

A third party's "Blocklisted Assets" page, opened from "Asset Reputation" in the sidebar, listing its assets found on reputation blocklists.

A third party's "DNS Health Issues" page, listing the DNS configuration issues found on its domains.

A third party's "Network Security" page on the "Potentially Insecure Ports" tab, listing the open ports on its hosts that may be insecure.

A third party's "AppSec and Vulnerabilities" page on the "Vulnerabilities" tab, listing the vulnerabilities found on its hosts.

A third party's "TLS/SSL Certificate Issues" page, listing the problems found with the certificates on its hosts.

The "Overview" of a third party's "Data Leakage & Dark Web Detection" pages, summarising its compromised accounts, mentions, and breach disclosures.

A third party's "User Accounts" page on the "Compromised Accounts" tab, listing accounts on its domains that were found in data breaches.

A third party's "Breach Mentions" page, opened from "Mentions" in the sidebar, listing the breach sources that mention its domains.

A third party's breach disclosures, opened from "Breach Disclosure" in the sidebar, listing the data breaches recorded for its domains.

A third party's "Documents" page, listing its documents with their title, description, file name, and document type, with "Add Document" above the table.

Individual third party risk interface and views

A third party's "Overview", with "Actions", its details, "Combined Risk Score", Digital Risk Score, "Risk Categories", and "Key Risk Indicators".

The top row shows the third party's lifecycle status and an "Actions" button. Below it:

Details: "Risk Rating", "Industry", "Sub Industry", "Domain Name", "Website", and "Business Criticality".
"Combined Risk Score": the overall score described below.
"Digital Risk Score", "Risk Categories", and "Key Risk Indicators": the external monitoring results.
"Asset Map" and four activity panels.
"Risk Rating Over Time": the Digital Risk Score by day.

Combined Risk Score

The "Combined Risk Score" card, with the combined score linked to the "External Exposure" and "Questionnaire" scores.

The Combined Risk Score is the third party's overall security posture on a scale of 0 to 1000, where higher means more risk. It combines two scores on the same scale:

"External Exposure": the third party's Digital Risk Score, from StyxView's automated monitoring of its internet-facing assets.
"Questionnaire": the official score of the most recently completed questionnaire for this third party. A questionnaire is scored only if its template has scoring configured. See Managing Questionnaire Responses and Feedback.

The combined score is the average of the two. If only one of them exists, the combined score equals that one. If neither exists, the card shows "No data".

Each score is rated with the same bands: "Low" from 0 to 199, "Medium" from 200 to 399, "High" from 400 to 749, and "Very High" from 750. Select the combined score to open the third party's "Risk Score" pages.

The "Overview" tab of a third party's "Risk Score" page, beside the "Risk Score Card", "Risk Indicator List", and "Historic Risk Score" tabs.

The "Risk Score Card" tab of a third party's "Risk Score" page, with the score tiles and the grade of each risk indicator in each risk category.

The "Historic Risk Score" tab of a third party's "Risk Score" page, with "Overall risk score over time" and the comparison of two runs.

Digital Risk Score and risk categories

The "Digital Risk Score" gauge and industry average beside the "Risk Categories" breakdown and the "Key Risk Indicators" list.

"Digital Risk Score": a gauge showing the third party's current score out of 1000. "Industry Average Score" shows the average score in the third party's industry, for comparison. See Risk Score Card.
"Risk Categories": each category's share of the score, as a percentage. Select a category to open the Third Party Risk Indicator List filtered to it. For the categories and their weights, see Risk Score Overview.
"Key Risk Indicators": up to 12 indicators that add the most to the score, each with its "Score Impact" as a share of the score. Select "View More" to open the full Third Party Risk Indicator List.

Asset Map and activity summary

The "Asset Map" of the third party's IP addresses, beside the "Last Questionnaire Completed", "Questionnaires Completed/Sent", "Brand Risk - Lookalike Domains", and "Breach History" panels.

"Asset Map" plots the third party's detected IP addresses on a world map. Each circle is one or more assets in that region, sized by how many there are. Hover over a circle to see the IP address, its type, and its associated hosts. Use it to see where the third party's systems are hosted and where its risk is concentrated.

The four panels beside the map:

Panel	What it shows
"Last Questionnaire Completed"	How long ago the most recent questionnaire for this third party was completed, or "N/A" if none has been. Select it to open "Questionnaires".
"Questionnaires Completed/Sent"	The number of completed questionnaires, then the number not yet completed. Select it to open "Questionnaires".
"Brand Risk - Lookalike Domains"	The number of active lookalike domains imitating the third party's domains. A high number points to a higher risk of phishing or impersonation. Select it to open "Lookalike Domains".
"Breach History"	The number of the third party's domains found in data breaches, and how long ago the most recent was recorded. "No breaches recorded" means none were found. Select it to open "Breach Disclosure".

A third party's "Lookalike Domains" page with the domains that imitate its own, which could be used for phishing or impersonation.

Risk Rating Over Time

This chart shows the third party's Digital Risk Score for each day, so you can follow trends, confirm that remediation is working, or spot a deterioration.

The horizontal axis is the date. The vertical axis is the Digital Risk Score.
A rising line means more risk, for example from new vulnerabilities or other findings. A falling line means less risk, for example after remediation.
Drag the ends of the slider above the chart to change the date range.
Select a point on the line to open the third party's "Risk Score" for that date.

Changing lifecycle status, criticality, or description

Select "Actions" at the top of the dashboard, then:

"Change Lifecycle Status": pick a status in "Select Status" and, optionally, add "Comments". The statuses are described in Lifecycle statuses.
"Change Business Criticality": pick "Very Low", "Low", "Medium", "High", or "Very High".
"Change Description": edit the description of your relationship with the third party.

The "Change Lifecycle Status" dialog, with the "Select Status" field and an optional "Comments" box.

Select "Save" to apply the change.