Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Summarizing Federal & State Data Breach Notification Laws](/sites/default/files/styles/4_3_small/public/migration/images/databreachlaws_full_1.jpg.webp?itok=yVkT3Igr)
If your organization handles or works with a certain type of data, you have a legal obligation to protect that data. Generally speaking, this could refer to personal information like names, identifiers (i.e. social security numbers), health data, or financial data. If any such data is compromised, it’s not only your fiduciary responsibility to disclose the breach to those harmed—it’s also your legal obligation.
![4 Things You Should Include In Your Data Breach Response Plan](/sites/default/files/styles/4_3_small/public/migration/images/Data%2520Breach%2520Response%2520Plan%2520-%2520thumb_1.jpg.webp?itok=BpM0ztOY)
If you’re working on organizational cybersecurity, one of your top goals is likely putting a system in place that will help identify data breach incidents as quickly as possible, whether that data is inside your organization or with one of your vendors. Of course, simply knowing about a data breach incident isn’t enough—you have to take action immediately, or you could risk major data implications.
![Do You Have The Right Vendor Management Policies?](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_568645888_1.jpg.webp?itok=6KM6jgJj)
If you’re experiencing frustrating delays and procedural roadblocks during your vendor management process, you’re not alone. Security managers are seeing an increase in the number of third-parties integrating with their business, and Gartner reports that “60% of organizations are now working with more than 1,000 third parties”.
![What Is Endpoint Security & Why Is It Important?](/sites/default/files/styles/4_3_small/public/migration/images/Thumb-endpoint-security_1.jpg.webp?itok=eU9qSvHt)
From an IT perspective, an important part of endpoint security refers to ensuring that the endpoint devices connected to your network—computers, laptops, mobile devices, tablets, etc.—are running on the latest version or patch to all operating systems or software.
![inherent risk](/sites/default/files/styles/4_3_small/public/2023/02/24/inherent%20risk.jpg.webp?itok=pCR1Wf3S)
Learn what is inherent risk, how to measure it, and why it's a useful tool for your vendor risk management program.
![what is vulnerability monitoring](/sites/default/files/styles/4_3_small/public/2023/04/05/what%20is%20vulnerability%20monitoring.jpg.webp?itok=ARmLJ1nk)
In today’s ever changing cyber risk landscape, your organization must adopt a vulnerability management framework to control exposure and remediate risks in a timely manner.
![financial services cybersecurity](/sites/default/files/styles/4_3_small/public/2021/11/14/financial%20services.jpg.webp?itok=6nD94pl3)
The financial services sector is one of the highest performing in terms of cybersecurity. One factor that contributes to this performance is regulation.
![Supply chain risk and tools](/sites/default/files/styles/4_3_small/public/2022/02/14/shutterstock_1660696486.jpg.webp?itok=QutLe6Zu)
Make your vendor lifecycle more efficient and less fraught with cyber risk with these three tips for supply chain risk management.
![What Should Be In Your Security Benchmark Reports?](/sites/default/files/styles/4_3_small/public/migration/images/Thumb_Benchmark_1.jpg.webp?itok=NwWbb6NU)
A security benchmark report is a document that helps an organization identify their cybersecurity capabilities and initiatives and compare those efforts to peers or competitors of the same sector or size. This snapshot is prepared either internally by the organization or by a third party.
![Which Third-Party Risk Management Tools Do You Really Need?](/sites/default/files/styles/4_3_small/public/migration/images/AdobeStock_181392143-min_1.jpeg.webp?itok=M8aCuxEd)
With high-profile breaches being traced back to supply chain vulnerabilities and a regulatory environment that’s waking up to the realities of vendor risk, many organizations are investing heavily in third-party risk management (TPRM) programs.
![getting started with enterprise risk management software](/sites/default/files/styles/4_3_small/public/2023/06/08/getting-started-with-enterprise-risk-management-software.jpg.webp?itok=IKebtA5X)
Enterprise risk management software helps businesses monitor, manage, and mitigate many types of risk. However, procuring and implementing ERM software requires a significant investment, and choosing the solutions that are right for your business is a perennial challenge for risk management professionals.
![Vendor, Security posture](/sites/default/files/styles/4_3_small/public/2022/07/15/How%20to%20Measure%20Your%20Vendors%E2%80%99%20Security%20Posture%20sized.jpg.webp?itok=sxgKuouB)
Learn how to onboard vendors securely and at speed with automated, data-driven insights into your vendors’ security postures.
![vendor risk management checklist](/sites/default/files/styles/4_3_small/public/2023/06/16/vendor%20risk%20management%20checklist.jpeg.webp?itok=xGsunN94)
A vendor risk management checklist will ensure you capture relevant information from your vendors during the onboarding process. Here’s what to include.
![How to Scale a Cybersecurity Program Across the Expanding Attack Surface](/sites/default/files/styles/4_3_small/public/2023/03/24/Scale%20Cyber%20Program%2C%20SIZED.jpg.webp?itok=t5aLWf2K)
Learn how to scale your cybersecurity program with automation, continuous monitoring, and powerful data insights.
![How Secure is that Third Party Mobile App?](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Hand-using-phone-with-centrali-231266215_1.jpg.webp?itok=zCAR72Rw)
In a world where business is increasingly conducted on mobile devices, it is imperative that organizations offer mobile applications to serve their customer base. In fact, for many businesses, mobile applications are one of the primary channels used to interact with customers and to sell products and services.