Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Can Your Vendor Assessments Be More Efficient?](/sites/default/files/styles/4_3_small/public/migration/images/VendorAssessment_BlogImage_1.jpg.webp?itok=ggSZ3Bcp)
If you’re using a “one-size fits all” approach to managing your vendor lifecycle, you are missing opportunities to save money and operate more efficiently. Vendor management efficiencies don’t end in the onboarding stage: using a continuous vendor monitoring approach will help you better manage your third parties you worked so hard to onboard.
![3 Ways to Improve Your Vendor Lifecycle & Make it More Efficient](/sites/default/files/styles/4_3_small/public/migration/images/3%2520ways%2520to%2520improve%2520vendor%2520lifecycle%2520management%2520blog_1.jpg.webp?itok=709DHoAh)
During this dynamic and stressful workplace environment 2020 has brought us, finding the most efficient ways to perform in your job has never been more important. When it comes to managing your vendor lifecycle, there are three ways you can implement more efficient processes to save time and money for your business.
![How To Mature Your Vendor Risk Management Program](/sites/default/files/styles/4_3_small/public/migration/images/Vendor%2520maturity%2520model%2520intro%2520blog%2520picture_1.jpg.webp?itok=i8WN4BaR)
There are layers of uncertainty plaguing security professionals when it comes to the time, money, and energy they spend focusing on their third-party risk management systems. Without the proper tools and analysis, it is hard to know if your program is effective.
![Mitigating Risk in Your Expanding Digital Ecosystem](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1160196997_1.jpg.webp?itok=ULBeLJl9)
As time goes on, organizations are taking on more and more new digital transformation initiatives to become increasingly agile and boost productivity — dramatically transforming the number of digital touchpoints employees interact with on a day-to-day basis.
![FBI Alerts Companies of Cyber Attacks Aimed at Supply Chains](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1243021015_1.jpg.webp?itok=y99dVI45)
Earlier this month, ZDNet broke the news that the FBI had sent a cybersecurity alert to the U.S. private sector warning of an ongoing hacking campaign against supply chain software providers. According to the FBI, hackers are attempting to infect upstream companies — particularly those in the energy sector — with the Kwampirs malware, a remote access trojan (RAT).
![Guide: Fourth-Party Cyber Risk & Management](/sites/default/files/styles/4_3_small/public/migration/images/Fourth%2520party%2520blog%2520post_1.png.webp?itok=OWaBUUiV)
In today’s interconnected world, supply chains are growing exponentially. As a result, third-party risk has become a big focus for senior management. But what about the vendors that your suppliers rely on and the threat of fourth-party risk?
![How to Develop a Vendor Cyber Risk Management Framework](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_588813473_1.jpg.webp?itok=TRqqSHOe)
Third-party vendors are an essential part of today’s business ecosystem. A study by Gartner finds that, in 2019, 60% of organizations work with more than 1,000 third parties and those networks are only expected to grow.
![Airbus Incident Shines Spotlight on Third-Party Vendor Security Risks](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1319730824_1.jpg.webp?itok=SWXTMUgV)
2019 has been a year of high-profile attacks, and, as we predicted, it’s only getting worse. That’s certainly the case for Airbus.
![How Much Does a Data Breach Cost in 2019?](/sites/default/files/styles/4_3_small/public/migration/images/Calculating%2520The%2520Cost%2520Of%2520A%2520Data%2520Breach%2520Factors%2520You%2520Should%2520Keep%2520In%2520Mind%2520-%2520thumb_1.jpg.webp?itok=gGndBCHn)
This post was originally published October 31, 2016 and has been updated for accuracy and comprehensiveness
![Worthwhile TPRM Certifications for Security & Risk Professionals](/sites/default/files/styles/4_3_small/public/migration/images/AdobeStock_214874828-min_1.jpeg.webp?itok=e7WxrZna)
As the importance of third-party risk management (TPRM) continues to grow, organizations are hiring for related roles more seriously than ever before. To compensate, security and risk professionals are seeking out certification programs in TPRM to learn new skills and validate their expertise.
![New Study: Organizations Struggle to Manage Cyber Risk in Their Supply Chains](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-World-Map-Plane-Logistic-In-Ne-216174871_1.jpg.webp?itok=_QxY0y-I)
A new report from McKinsey & Company sheds light on something we’ve known for many years – organizations are struggling to make significant progress in managing cybersecurity risk in their supply chains.
![Eradicate Cyber Threats: Launch Your Third-Party Risk Management Program](/sites/default/files/styles/4_3_small/public/2022/02/18/Eradicate%20Cyber%20Threats-%20Launch%20Your%20Third-Party%20Risk%20Management%20Program.png.webp?itok=vfTPV2fd)
When launching a third-party risk management (TPRM) program, one of the best places to begin to be proactive about mitigating cyber risk from your third parties is by examining the vulnerabilities present on their network. Despite global knowledge of the harm that vulnerabilities can do to users and businesses alike, they still continue to persist and cause business interruption worldwide.
![NERC CIP-013-1: Effective Date, Preparation Strategies, & Impact](/sites/default/files/styles/4_3_small/public/migration/images/4.10-Blog-Image-NERC-Utilities_1.jpg.webp?itok=FeBQXNSs)
The North American Electric Reliability Corporation (NERC) has developed a new set of cybersecurity standards designed to help power and utility (P&U) companies limit their exposure to third-party cyber risks and preserve the reliability of bulk electric systems (BES).
![Is Your Risk Management Program Ready for the New European Banking Authority’s Guidelines?](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Euro-Coins-Stacked-On-Each-Oth-223184503_1.jpg.webp?itok=RFOUPRap)
In June 2018, the European Banking Authority (EBA) put forth guidelines on outsourcing arrangements that highlighted the importance of risk management within financial organizations. The notice of these guidelines was announced in June 2018 and will be enforced later in 2019.
![BitSight Security Ratings Platform Expands Its Visibility in Compromised Systems](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-cybercrime-hacking-and-techno-239309626_1.jpg.webp?itok=vqoYygdC)
Since creating the Security Ratings market in 2011, a core component of Bitsight’s value to users has been providing industry-leading comprehensive visibility into malware communications.