“Headline-making cyber incidents, which are often loss-making events for impacted companies and their stakeholders, continue to drive headlines around the world,” said Brian Russo, Managing Director, Product, at ISS STOXX.
January 13, 2026
Statement in Connection with ISS Cyber Risk Score Model Enhancements
ISS STOXX today announced enhancements to its ISS Cyber Risk Score, which provides users with an empirical, forward-looking view of cyber incident risk based on a detailed assessment of an organization’s internet-exposed network and website assets.
The new ISS Cyber Risk Score takes advantage of a richer collection of cyber incident exemplar data, improved signal collection techniques, and both several new and enhanced model features. Among other things, the new version of the algorithm that generates the score now leverages several new Passive Domain Name System (PDNS) signal data elements, capturing risk information regarding the way in which organizations configure and secure their DNS infrastructure. The addition of this signal set into the model boosts overall performance, especially as it relates to firms that have few or no network assets – a condition that is becoming more common as companies shift workloads to the cloud or other SaaS services run by third parties.
“Headline-making cyber incidents, which are often loss-making events for impacted companies and their stakeholders, continue to drive headlines around the world,” said Brian Russo, Managing Director, Product, at ISS STOXX. “Cyber risks continue to grow, and regulatory and disclosure frameworks for both oversight and realized incidents continue to drive a greater level of scrutiny and focus on cyber as a measurable and manageable topic area for firms and investors alike. Better measurements enable better risk discernment, which in turn brings the possibility of more responsive risk management. We are happy to be part of that equation.”
ISS STOXX makes the ISS Cyber Risk Score available to institutional investors through its DataDesk platform for S&P 1500 and Russell 3000 index firms, as well as firms in the S&P TSX Composite and ASX 300 indices. The score is also included in the ISS Governance Benchmark Research and Voting reports for this universe of companies. ISS-Corporate, a separately managed business unit of ISS STOXX, makes the score available for corporate issuers, insurers, and third-party risk professionals, where it serves multiple risk management and peer benchmarking use cases.
Effective today, scores and other metrics based on the new ISS Cyber Risk Score model will appear in downstream systems for subscribing clients.
Statement in Connection with ISS Cyber Risk Score Model Enhancements
ISS STOXX today announced enhancements to its ISS Cyber Risk Score, which provides users with an empirical, forward-looking view of cyber incident risk based on a detailed assessment of an organization’s internet-exposed network and website assets.
The new ISS Cyber Risk Score takes advantage of a richer collection of cyber incident exemplar data, improved signal collection techniques, and both several new and enhanced model features. Among other things, the new version of the algorithm that generates the score now leverages several new Passive Domain Name System (PDNS) signal data elements, capturing risk information regarding the way in which organizations configure and secure their DNS infrastructure. The addition of this signal set into the model boosts overall performance, especially as it relates to firms that have few or no network assets – a condition that is becoming more common as companies shift workloads to the cloud or other SaaS services run by third parties.
“Headline-making cyber incidents, which are often loss-making events for impacted companies and their stakeholders, continue to drive headlines around the world,” said Brian Russo, Managing Director, Product, at ISS STOXX. “Cyber risks continue to grow, and regulatory and disclosure frameworks for both oversight and realized incidents continue to drive a greater level of scrutiny and focus on cyber as a measurable and manageable topic area for firms and investors alike. Better measurements enable better risk discernment, which in turn brings the possibility of more responsive risk management. We are happy to be part of that equation.”
ISS STOXX makes the ISS Cyber Risk Score available to institutional investors through its DataDesk platform for S&P 1500 and Russell 3000 index firms, as well as firms in the S&P TSX Composite and ASX 300 indices. The score is also included in the ISS Governance Benchmark Research and Voting reports for this universe of companies. ISS-Corporate, a separately managed business unit of ISS STOXX, makes the score available for corporate issuers, insurers, and third-party risk professionals, where it serves multiple risk management and peer benchmarking use cases.
Effective today, scores and other metrics based on the new ISS Cyber Risk Score model will appear in downstream systems for subscribing clients.
2024 Market IQ: India
Meme Streets: A Road to Relative TSR Windfalls?
Market Update: Saudi Arabia
Why Loan Disclosure Is More Important than Net Zero Membership