Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![caiq sig questionnaires](/sites/default/files/styles/4_3_small/public/2023/02/07/caiq%20sig.jpg.webp?itok=BNLSCDke)
How is one questionnaire different from another, and how do you decide which ones to use in vendor risk assessments? We compare CAIQ vs. SIG.
![3 Cybersecurity IT Risk Assessment Templates](/sites/default/files/styles/4_3_small/public/migration/images/Thumb-3-Information-Security-Risk-Assessment-Templates-To-Get-You-Started-Quickly_1.jpg.webp?itok=jyE3Nzw_)
Developing a VRM plan from scratch or looking to scale your existing program? Here are some cybersecurity IT risk assessment templates to help you get started.
![supply chain resilience](/sites/default/files/styles/4_3_small/public/2022/09/16/shutterstock_2072769434.jpg.webp?itok=Ha6ObOvF)
Learn how to improve supply chain resilience and combat third-party risk through continuous, automated monitoring of your vendors’ risk postures.
![Technology Resiliency & Outsourcing (TRO): Familiarize Yourself](/sites/default/files/styles/4_3_small/public/migration/images/Technology_Resiliency__Outsourcing_TRO_Familiarize_Yourself_-_thumb_1.jpg.webp?itok=Fj6fURkG)
In a recent Huffington Post article, Shared Assessments senior director Tom Garrubba discussed how third-party risk management has become an important topic to many executives and board members around the world. He recalls a conversation he had with Robin Jones, a member of the U.K.’s Financial Conduct Authority (FCA), during a conference in London. Jones expressed that his “unit [has been] paying renewed focus on technology resiliency and outsourcing.”
![Third-Party Risk Management Best Practices for Enterprise](/sites/default/files/styles/4_3_small/public/migration/images/Third-Party%2520Risk%2520Management%2520Best%2520Practices%2520for%2520Enterprise%2520Blog_1.jpg.webp?itok=FUS6QwU5)
Companies are becoming increasingly reliant on third-party relationships, and cyber attacks originating in the systems of third parties are on the rise.
![Third Party Tiering: The Cornerstone of a Strong Third-Party Risk Management Program](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Business-Hierarchy-Ranking-An-196512991_1.jpg.webp?itok=CXLZmNjX)
With the number of third parties connected to businesses increasing, risk and security teams need to ensure they are spending the right amount of attention on the right third parties. To do this, organizations need a clearly defined, tiered portfolio of third parties, vendors, and suppliers. Today, many companies tier their third parties based on the inherent risk they present, and the types of data they handle or have access to.
![Cyber Insurance Underwriting: What Role Do Security Ratings Play?](/sites/default/files/styles/4_3_small/public/migration/images/Cyber%2520Insurance%2520Underwriting%2520-%2520thumb_1.jpg.webp?itok=2mi-Yqqs)
If you’re involved in the cyber insurance underwriting process—from the transaction to the ongoing operations—you’re constantly looking for things to help you (and your team) select better risks. Here are three specific ways Bitsight’s Security Ratings platform can play an integral role in the underwriting process.
![Top 5 Trends in Telecom Risk Management](/sites/default/files/styles/4_3_small/public/migration/images/top-5-trends-in-telecom-risk-management_2.jpeg.webp?itok=PnmzbAZA)
As regulations shift and providers enter new markets, the telecom industry is changing rapidly. In preparation for these changes, telecom risk management professionals must become aware of new risks on the horizon. Privacy and net neutrality laws, new kinds of cyber threats, reputational dangers, and other factors are all poised to affect telecom companies deeply in 2019.
![5 Reasons To Uncover Third-Party Risk With Security Ratings](/sites/default/files/styles/4_3_small/public/migration/images/What%2520Is%2520A%2520Security%2520Rating_1.jpg.webp?itok=0DueNjVX)
Any seasoned vendor risk manager will tell you that determining whether a particular third party’s cybersecurity is up to your standards—and deciding how much risk to assume through your relations with your vendors—is not a simple task. Even so, there are technologies available that make handling vendor risk easier—and one of those is Bitsight Security Ratings.
![5 Best Practices for Conducting Cyber Security Assessments](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_631975841_2.jpg.webp?itok=ty2MaVd6)
Third parties are essential to helping your business grow and stay competitive. But if you’re not careful, your trusted partnerships can introduce unwanted cyber risk and overhead into your organization.
![Using BitSight Security Ratings to Foster Close Vendor Relationships](/sites/default/files/styles/4_3_small/public/migration/images/12.1-Blog-Full_1.png.webp?itok=N6Am_MfY)
In today’s business landscape, it’s critical to manage the risk that your vendors, or third parties, can pose to your business — and it’s not always the easiest task. It requires that organizations not only have the ability to continuously monitor and identify new risk, but also the ability to work with their vendors to fix security issues quickly. Getting to risk reduction rapidly means that both organizations are communicating effectively, using data and evidence rather than conjecture to make progress.
![5 vendor evaluation tools to add to your cyber risk management toolkit](/sites/default/files/styles/4_3_small/public/2021/12/10/5%20vendor%20evaluation%20tools%20to%20add%20to%20your%20cyber%20risk%20management%20toolkit.png.webp?itok=5jgMMpvG)
Five of the most critical vendor evaluation tools that you should have in your cybersecurity risk management toolkit.
![5 Tips to Improve Cyber Security Monitoring of Your Vendors](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_239364013_1.jpg.webp?itok=Kz7cTys7)
What’s the biggest struggle your vendor risk managers face when establishing cyber security monitoring processes? From sudden increases in the use of third-parties by your organization, to not knowing which vendors might be impacted by the current data breach, vendor risk managers are plagued by challenges and roadblocks that impede their program efficiency.
![Cybersecurity Policy & The Role Of The Executive Team](/sites/default/files/styles/4_3_small/public/migration/images/Thumb-Cybersecurity_Policy__The_Role_Of_The_Executive_Team_4.jpg.webp?itok=V_hRiQMr)
One of the primary roles of senior executives—from the CISO to the general council and all the way up to the board of directors—is to ensure that an organization has policies set in place for cybersecurity.
![vendor risk assessment tips](/sites/default/files/styles/4_3_small/public/2023/05/29/vendor%20risk%20assessment%20tips.jpeg.webp?itok=qW3z08B0)
Follow these tips to make sure all your vendors continuously meet your security standards.