Press Release

Statement in Connection with ISS Cyber Risk Score Model Enhancements

ISS STOXX today announced enhancements to its ISS Cyber Risk Score, which provides users with an empirical, forward-looking view of cyber incident risk based on a detailed assessment of an organization’s internet-exposed network and website assets.

The new ISS Cyber Risk Score takes advantage of a richer collection of cyber incident exemplar data, improved signal collection techniques, and both several new and enhanced model features.  Among other things, the new version of the algorithm that generates the score now leverages several new Passive Domain Name System (PDNS) signal data elements, capturing risk information regarding the way in which organizations configure and secure their DNS infrastructure.  The addition of this signal set into the model boosts overall performance, especially as it relates to firms that have few or no network assets – a condition that is becoming more common as companies shift workloads to the cloud or other SaaS services run by third parties. 

Headline-making cyber incidents, which are often loss-making events for impacted companies and their stakeholders, continue to drive headlines around the world

Brian Russo,

Managing Director, Product, ISS STOXX

“Cyber risks continue to grow, and regulatory and disclosure frameworks for both oversight and realized incidents continue to drive a greater level of scrutiny and focus on cyber as a measurable and manageable topic area for firms and investors alike.  Better measurements enable better risk discernment, which in turn brings the possibility of more responsive risk management.   We are happy to be part of that equation.” 

ISS STOXX makes the ISS Cyber Risk Score available to institutional investors through its DataDesk platform for S&P 1500 and Russell 3000 index firms, as well as firms in the S&P TSX Composite and ASX 300 indices.   The score is also included in the ISS Governance Benchmark Research and Voting reports for this universe of companies.  ISS-Corporate, a separately managed business unit of ISS STOXX, makes the score available for corporate issuers, insurers, and third-party risk professionals, where it serves multiple risk management and peer benchmarking use cases.

Effective today, scores and other metrics based on the new ISS Cyber Risk Score model will appear in downstream systems for subscribing clients.

See More

Related Press Releases

See All

The products and services described on this website are provided by entities within the ISS STOXX group and may be subject to different regulatory frameworks. These entities are separate, but affiliated, subsidiaries of ISS STOXX GmbH.

Stewardship Solutions, which consists of ISS STOXX Governance and ISS STOXX Sustainability, are provided exclusively by Institutional Shareholder Services Inc. (“ISS Inc.”) an Investment Adviser registered with the US Securities and Exchange Commission (“SEC”) under the Investment Advisers Act of 1940. ISS Inc. provides its investment advisory services exclusively to institutional clients and does not serve the retail marketplace at this time. Additional information about ISS Inc., including its advisory services, fees, and conflict mitigation practices, is available in ISS’ Form ADV which is accessible through the SEC’s website at sec.gov and also our Compliance page.

All solutions under Indices including STOXX services, such as indices and benchmark data, are provided by STOXX Ltd. and are governed by the EU Benchmark Regulation.

The solutions listed below, which are offered by ISS Market Intelligence, are provided by Asset International Inc and/or its subsidiaries, and are not considered investment advisory services under the Investment Advisers Act of 1940.

ISS Market Intelligence’s class action solutions are provided by Securities Class Action Services, LLC and are not considered investment advisory services under the Investment Advisers Act of 1940.

ISS-Corporate services are provided by ISS Corporate Solutions, Inc. These services are not considered investment advisory services under the Investment Advisers Act of 1940.

This communication and all of the information contained in it, including without limitation all text, data, graphs and charts, is the property of ISS STOXX GmbH and/or its subsidiaries and is provided for informational purposes only. The information may not be modified, reproduced or redisseminated, in whole or in part, without prior written permission from ISS STOXX. All statistics referenced in this document are approximate and updated on an annual basis and, unless otherwise noted, relate to the year ending December 31, 2025.

None of the information included in this communication constitutes an offer to sell (or a solicitation of an offer to buy), or a promotion or recommendation of, any security, financial product or other investment vehicle, and ISS STOXX does not endorse or approve any issuer, securities, financial products.

ISS STOXX MAKES NO EXPRESS OR IMPLIED WARRANTIES OR REPRESENTATIONS WITH RESPECT TO THE INFORMATION.

©2026 ISS STOXX and/or its subsidiaries. All rights reserved.