Overview
This article explains how to use the Group-Level Overview in the Cye Exposure Management Platform to analyze cybersecurity performance across subsidiaries. You’ll learn how aggregated and individual metrics—like exposure, cost of breach, and maturity—are calculated, what they mean, and how to navigate between companies.
If you're working in a large enterprise with a Group Management setup, this dashboard gives you a centralized, at-a-glance view of your organization’s cyber risk posture.
Aggregated Risk Metrics (Top Section)
The top of the dashboard summarizes risk data from all subsidiaries. These values represent your organization's total exposure, maturity, and benchmark comparisons.
Organization Exposure
This is the aggregated risk exposure of all subsidiaries combined, expressed as a monetary value.
How it's calculated:
For each subsidiary:
Likelihood of breach × Cost of breach = Exposure
Then, exposures are summed across all subsidiaries.Example: 20% × $3.8M = $760K
Exposure values are based on a one-year timeframe.
Subsidiaries Below Industry Maturity
This widget shows the number of subsidiaries whose maturity scores fall below their industry benchmarks.
Click the widget to view the list.
Organization Maturity
This is the average maturity score of all subsidiaries.
Ranges from 1 to 5, with 5 indicating strong cybersecurity posture.
Revenue weighting is used in the average calculation (if available).
If subsidiaries use different frameworks, the most used one determines the calculation.
In case of a tie, the framework from subsidiaries with the most revenue is used.
If revenue is missing for some subsidiaries, an average is assumed.
Industry Maturity
This is the weighted industry benchmark, calculated similarly to organization maturity but based on industry norms instead of actual scores.
Subsidiary Metrics (Bottom Section)
Each subsidiary’s data is listed under the aggregated metrics. These values reflect the subsidiary's individual cybersecurity performance.
Metrics for Each Subsidiary
Exposure: Subsidiary-specific exposure, calculated the same way as for the organization.
Cost of Breach: Estimated damages in case of a breach, based on sector, region, and security posture.
Maturity: The subsidiary's organizational maturity score (1–5).
Primary Framework: The framework used by the Cye platform to calculate this subsidiary’s maturity.
Maturity Benchmark: Industry average maturity for that subsidiary’s sector.
Revenue: Annual revenue from goods or services.
Industry Sector: Sector classification (e.g., energy, financial).
Navigating Between Companies
Using the Org Tree
The Org Tree shows the parent company and its subsidiaries in a hierarchical list. Use the arrows next to a company name to expand or collapse its branch.
Use the search bar to find a company by name or location.
Click a company name to open its Cye platform instance.
The tree shows only the companies where you hold an active membership. Companies outside your permission scope are hidden.
For details, see Org. Navigation Tree Overview.
Access Requirements
You must be a member of a subsidiary to view its Cye platform instance.
If SSO is used by both companies, you’ll be logged in automatically.
If different auth methods are used, you’ll need to log in with your Cye platform credentials.
For access to a company that is not in your Org Tree, contact the Cye platform admin of that company.
Wrap-up / Next Steps
Whether you're monitoring overall exposure or drilling into a specific business unit, the Group-Level Overview keeps key metrics front and center. It’s your central view for comparing cybersecurity maturity and understanding where to focus mitigation efforts.
If you can’t access a company view, a quick word with your Cye platform admin should get you what you need.