Cybersecurity Risk Assessment
A breach disclosed three paragraphs deep in a 10-K, or a security-posture gap mentioned once in a vendor questionnaire — Anweshna surfaces it alongside every other risk category, in the same pass.
What it screens for
- Breach history — disclosed incidents, notification obligations, and unresolved remediation.
- Security-posture disclosures — certifications, control frameworks, or their absence.
- Data-handling gaps — practices that create downstream data-privacy or regulatory exposure post-close.
Where it fits in the composite score
Cybersecurity isn't a blocking category on its own, but it still carries real weight (7%) in the composite score alongside Data Privacy — two categories that increasingly determine post-close integration cost and regulatory exposure even when they don't individually halt a deal. A closely related risk — AI model/vendor dependency and AI-specific supply-chain exposure — is now scored separately and does block, under AI & Tech Governance.
Cybersecurity Risk Assessment FAQ
What does Anweshna screen for in Cybersecurity Risk Assessment?
Anweshna screens deal documents for breach history, security-posture disclosures, and data-handling gaps, among other signals. See the full list of signals above.
Is Cybersecurity Risk Assessment a blocking risk category?
Cybersecurity Risk Assessment carries a 7% weight in Anweshna's composite score. It is a tracked, non-blocking category — it contributes to the overall risk posture but does not independently halt a deal.