Current and emerging third-party cyber risk management approaches and challenges

Managing third-party cyber risk is critical for businesses, but a lack of continuous monitoring, consistent reporting, and other blind spots are creating challenges that could leave organizations vulnerable to data breaches and other consequences. Most… Continue reading Current and emerging third-party cyber risk management approaches and challenges

BitSight releases new capability for insurers to evaluate SMB cyber risk and issue policies

BitSight, the Standard in Security Ratings, announced the availability of a new capability for insurers that delivers accurate, trusted security performance information on millions of small- and medium-sized insurance applicants in just seconds, enabli… Continue reading BitSight releases new capability for insurers to evaluate SMB cyber risk and issue policies

What actually happens when a company examines third-party risk

For a moment, look past Russian cybercriminals, North Korean cryptocurrency scams and the idea that election infrastructure used by democracies around the world lacks meaningful digital safeguards. While those issues are significant, people in charge of information security at large U.S. companies spend the majority of their time assessing whether their firm is likely to experience a data breach that begins outside of their own proprietary network. That assessment goes beyond the deluge of obfuscated code, technical jargon or marketing pitches. It’s rooted in crunching numbers in Excel spreadsheets and other measuring strategies that can quantify whether their partners and vendors are prepared to keep hackers out. Security bosses at Fortune 500 companies traditionally have compelled partners to answer monotonous questionnaires about their cyber readiness. Private sector surveys, including some obtained by CyberScoop, typically include hundreds, and sometimes thousands, of arcane questions meant to elicit information about how firms use encryption, require […]

The post What actually happens when a company examines third-party risk appeared first on CyberScoop.

Continue reading What actually happens when a company examines third-party risk

BitSight releases Peer Analytics, improving security performance management

BitSight, the Standard in Security Ratings, announced the availability of BitSight Peer Analytics, the latest Security Performance Management offering on the BitSight platform. Leveraging the world’s most trusted and comprehensive view of securit… Continue reading BitSight releases Peer Analytics, improving security performance management

PCI, Capsule8, & Polaris – Enterprise Security Weekly #128

    Capsule8 expands threat detection platform for PCI DSS, BitSight unveils peer analytics for more effective security performance management, Imperva advances autonomous application protection capabilities, and Synopsys launches Polaris Software inte… Continue reading PCI, Capsule8, & Polaris – Enterprise Security Weekly #128

Privva partners with BitSight to make vendor security assessment comprehensive

Privva, a leading risk management technology provider, announced a partnership with BitSight, the Standard in Security Ratings, to provide customers with a 360° view of third-party risk as part of Privva’s open platform initiative. The Privva platform … Continue reading Privva partners with BitSight to make vendor security assessment comprehensive

New infosec products of the week​: September 7, 2018

IDERA updates toolset for SQL Server security and compliance SQL Secure and SQL Compliance Manager work together to help database administrators establish and enforce security policies for SQL Server environments on Windows OS, whether located on premi… Continue reading New infosec products of the week​: September 7, 2018

BitSight, SentinelOne, and McAfee – Enterprise Security Weekly #105

How the Department of Defense is using Open Source, BitSight launches forecasting capability, SentinelOne teams up with Sumo Logic, Swimlane supports McAfees advanced security operation, Fortinet releases new IoT security controller, and Secureworks op… Continue reading BitSight, SentinelOne, and McAfee – Enterprise Security Weekly #105

BitSight unveils cybersecurity performance planning and analytics solution

BitSight announced the availability of BitSight Forecasting, the analytics offering in the Security Rating Services industry to provide visibility into a company’s security program, as well as insights into the efficacy of its investments and ini… Continue reading BitSight unveils cybersecurity performance planning and analytics solution

Security ratings company BitSight earns $60 million in Series D funding

BitSight, a company that provides cybersecurity ratings for other companies, announced on Thursday that it has raised $60 million in its Series D funding round. The company provides a platform that evaluates customers’ cybersecurity posture. The service comes in handy as companies look for ways to manage risk, underwrite cyber insurance policies and conduct due diligence when doing business with third parties. Customers can use the platform gain a window into the cybersecurity posture of potential partners along with their own. BitSight gives companies a score between 250 and 900. BitSight cites a Gartner report that predicts that in the coming years, cybersecurity ratings will be as important as credit card ratings, and that having them will be a given before conducting business with other companies. The company also puts out public reports assessing some of the significant cyber risks facing specific sectors, such as education and financial. Based in […]

The post Security ratings company BitSight earns $60 million in Series D funding appeared first on Cyberscoop.

Continue reading Security ratings company BitSight earns $60 million in Series D funding