Risk Analysis in the context of external cybersecurity refers to evaluating and assessing the potential risks and vulnerabilities that an organization's external-facing systems and assets may face from cyber threats and attacks from outside the organization. This analysis helps organizations understand their exposure to external threats and make informed decisions about mitigating and managing these risks effectively.

ThreatNG is an external attack surface management (EASM) and digital risk protection intelligence platform that provides susceptibility and exposure security ratings in the following manner:

External Attack Surface Management (EASM): EASM continuously monitors an organization's external attack surface, which includes all internet-facing assets, such as websites, servers, cloud services, and more. EASM discovers, inventory, and assesses these assets, including their configurations and vulnerabilities. ThreatNG employs EASM in the following manner:

• Asset Discovery: ThreatNG would use EASM to discover all external-facing assets owned by the organization. It includes finding new assets as they are deployed or brought online.

• Asset Inventory: It maintains an inventory of all assets, including information like IP addresses, domain names, SSL certificates, and configurations. This inventory helps in understanding what needs protection.

• Vulnerability Assessment: ThreatNG assesses the vulnerabilities associated with each asset by scanning for known security flaws and misconfigurations. This assessment helps in identifying potential points of attack.

Digital Risk Protection Intelligence: This refers to collecting and analyzing threat intelligence data from various sources to understand the threat landscape. ThreatNG employs digital risk protection intelligence in the following ways:

• Threat Intelligence Feeds: Threat intelligence feeds to stay updated on the latest cyber threats, malware signatures, and known attack patterns.

• Dark Web Monitoring: It may monitor the dark web for mentions of the organization, its assets, or any stolen data to proactively identify potential threats.

• Anomaly Detection: Using advanced analytics, ThreatNG can identify unusual or suspicious activities related to the organization's external assets, which could indicate a cyber threat.

• Contextual Analysis: ThreatNG analyzes threat intelligence data in the context of the organization's specific attack surface, helping to prioritize threats based on their relevance and potential impact.

Susceptibility and Exposure Security Ratings: With the information gathered through EASM and digital risk protection intelligence, ThreatNG can provide security ratings for an organization's external attack surface:

• Susceptibility Ratings: These ratings assess the likelihood of a successful cyberattack based on vulnerabilities, misconfigurations, and threat intelligence. High susceptibility indicates a higher chance of a successful attack.

• Exposure Ratings: Exposure ratings evaluate how much an organization's external assets are visible and accessible to potential attackers. High exposure indicates a larger attack surface and increased risk.

ThreatNG helps organizations prioritize and focus their cybersecurity efforts on the most critical areas, such as patching vulnerabilities, improving configurations, and implementing threat mitigation strategies to reduce their overall cyber risk from external threats. It also assists in making informed decisions about resource allocation and risk management.