BitSight: Function App to CCF Migration Restores Third-Party Risk Visibility

What Changed

BitSight migrated from a legacy Function App connector to two Codeless Connector Framework (CCF) connectors:

• BitSight Security Statistics — ingests Company Profiles, Rating Details, Diligence Historical Statistics, Risk Vector Statistics, Industries Statistics, Findings Summary, and Vulnerability reference data into 7 custom tables
• BitSight Security Events — ingests Alerts, Breaches, and security Findings (Diligence, Compromised Systems, User Behavior) into 3 custom tables

The split architecture allows customers to independently enable security statistics data or event/alert data based on operational needs.

Data Source Migration

Legacy ingestion: Function App with Azure Functions runtime dependency
New ingestion: Native CCF with DCR/DCE — eliminates Function App deployment and maintenance overhead
Table mapping: All 10 custom tables retained with “_CL” suffix (BitSightCompanyDetails_CL, BitSightAlerts_CL, etc.)

Parser Impact

All 13 parsers updated with union isfuzzy=true logic to support both legacy table names (BitsightAlerts_data_CL) and new CCF table names (BitSightAlerts_CL). This provides backward compatibility during migration periods.

New parsers added:

• BitSightCompanyRatingDetails
• BitSightVulnerabilitiesFindingsSummary

Security Impact (Visibility & Fidelity)

BitSight provides third-party risk monitoring and external attack surface visibility. The Function App architecture required customers to deploy and maintain Azure Functions infrastructure, creating potential blind spots if deployments failed or Functions became unhealthy.

Migration benefit: CCF eliminates Function App dependency — data ingestion now relies on Microsoft-managed DCR/DCE infrastructure rather than customer-deployed Functions. This reduces the risk of ingestion failures due to Function App misconfigurations, runtime version conflicts, or scaling issues.

Detection continuity: Parser union logic ensures existing detections continue functioning against both legacy and new table schemas during transition periods.

Affected Files

.script/tests/KqlvalidationsTests/CustomTables/BitSightAlerts_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitSightBreaches_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitSightCompanyDetails_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitSightCompanyRatingDetails_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitSightDiligenceHistoricalStatistics_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitSightDiligenceStatistics_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitSightFindingsSummary_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitSightFindings_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitSightObservationStatistics_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitsightIndustrialStatistics_CL.json
.script/tests/KqlvalidationsTests/CustomTables/BitsightVulnerabilitiesFindingsSummary_CL.json
Solutions/BitSight/Data Connectors/BitSight_CCF/ConnectorDefinition.json
Solutions/BitSight/Data Connectors/BitSight_CCF/DCR.json
Solutions/BitSight/Data Connectors/BitSight_CCF/PollingConfig.json
Solutions/BitSight/Data Connectors/BitSight_CCF/table_BitSightCompanyDetails.json
Solutions/BitSight/Data Connectors/BitSight_CCF/table_BitSightCompanyRatingDetails.json
Solutions/BitSight/Data Connectors/BitSight_CCF/table_BitSightDiligenceHistoricalStatistics.json
Solutions/BitSight/Data Connectors/BitSight_CCF/table_BitSightDiligenceStatistics.json
Solutions/BitSight/Data Connectors/BitSight_CCF/table_BitSightFindingsSummary.json
Solutions/BitSight/Data Connectors/BitSight_CCF/table_BitSightObservationStatistics.json
Solutions/BitSight/Data Connectors/BitSight_CCF/table_BitsightIndustrialStatistics.json
Solutions/BitSight/Data Connectors/BitSight_CCF/table_BitsightVulnerabilitiesFindingsSummary.json
Solutions/BitSight/Data Connectors/BitSight_Events_CCF/ConnectorDefinition.json
Solutions/BitSight/Data Connectors/BitSight_Events_CCF/DCR.json
Solutions/BitSight/Data Connectors/BitSight_Events_CCF/PollingConfig.json
Solutions/BitSight/Data Connectors/BitSight_Events_CCF/table_BitSightAlerts.json
Solutions/BitSight/Data Connectors/BitSight_Events_CCF/table_BitSightBreaches.json
Solutions/BitSight/Data Connectors/BitSight_Events_CCF/table_BitSightFindings.json
Solutions/BitSight/Package/testParameters.json
Solutions/BitSight/Parsers/BitSightAlerts.yaml
Solutions/BitSight/Parsers/BitSightBreaches.yaml
Solutions/BitSight/Parsers/BitSightCompanyDetails.yaml
Solutions/BitSight/Parsers/BitSightCompanyRatingDetails.yaml
Solutions/BitSight/Parsers/BitSightCompanyRatings.yaml
Solutions/BitSight/Parsers/BitSightDiligenceHistoricalStatistics.yaml
Solutions/BitSight/Parsers/BitSightDiligenceStatistics.yaml
Solutions/BitSight/Parsers/BitSightFindingsData.yaml
Solutions/BitSight/Parsers/BitSightFindingsSummary.yaml
Solutions/BitSight/Parsers/BitSightGraphData.yaml
Solutions/BitSight/Parsers/BitSightIndustrialStatistics.yaml
Solutions/BitSight/Parsers/BitSightObservationStatistics.yaml
Solutions/BitSight/Parsers/BitSightVulnerabilitiesFindingsSummary.yaml
Solutions/BitSight/Workbooks/BitSightWorkbook.json
(packaging artefacts: 4.0.0.zip, ReleaseNotes.md, SolutionMetadata.json, Solution_BitSight.json, createUiDefinition.json, mainTemplate.json)