BITSIGHT SECURITY RATINGS BLOG

Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.

Filter by Topic

Filter by Date

3 Tips for Cyber Risk Mitigation that Drive Operational Efficiencies

Investments in digital initiatives are essential to success. But, according to Accenture, 79% of organizations are adopting new and emerging technologies faster than they can address security issues. The finding isn’t surprising. While the...

READ MORE »

How to Define Your Cyber Risk Appetite & Hold Vendors to the Threshold

As cyberattacks surge, you’re charged with protecting your organization’s expanding digital footprint. But what about the risk posed by vendors?

It’s estimated that 60% of organizations now work with more than 1,000 third parties. If not...

READ MORE »

CIS Critical Security Controls: What Are They and How Can You Meet These Standards?

As cyber threats evolve and business models change, maintaining a mature cybersecurity program can be challenging. You need to be confident that your organization’s current security tools and techniques are effective. All it takes is a...

READ MORE »

Continuous Controls Monitoring: Automatically and Continuously Identify Gaps in Security Controls

Gaps in security controls can be hard to detect. Misconfigured software, open ports, and unpatched systems all expose your organization to cyber risk. They also negatively impact your BitSight Security Rating.

READ MORE »

BitSight Apache Risk Analysis Highlights Need To Address CISA “Known Vulnerabilities”

Today, the Cybersecurity and Infrastructure Security Agency (CISA) issued Binding Operational Directive (BOD) 22-01, Reducing the Significant Risk of Known Exploited Vulnerabilities, to drive urgent and prioritized remediation of...

READ MORE »

Cyber Security Due Diligence: 4 Best Practices to Protect your Organization from Risk

If your organization is entering into a relationship with a vendor or partner, due diligence is key to mitigating third-party risk. Due diligence allows risk management and compliance teams to make informed decisions about who your...

READ MORE »

Cambridge Centre for Risk Studies and BitSight Partner on Cybersecurity Economics

We are excited to announce a new research partnership with the Cambridge Centre for Risk Studies (CCRS). Our joint research will analyze the relationship between organizational cybersecurity investments and risk reduction. 

READ MORE »

More Network Security Monitoring Tools Doesn’t Mean More Visibility

Network security monitoring tools are a critical component of any IT security toolkit. These resources monitor and manage your network for cyber risk by scanning your organization’s digital assets for security vulnerabilities and threats.

...

READ MORE »

BitSight Algorithm Update: What You Should Know

BitSight is committed to creating trustworthy, data-driven, and actionable measurements of organizational cybersecurity performance. As part of this commitment, BitSight periodically makes improvements to our ratings algorithm. These...

READ MORE »
Load More

Get the Weekly Cybersecurity Newsletter.