Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![10 Frequently Asked Supplier Risk Management Questions](/sites/default/files/styles/4_3_small/public/migration/images/full-vendor-risk-management-questions-large_1.jpg.webp?itok=8qjZ5cpb)
Are you and your company at the early stages of implementing a supplier risk management program — or are you just beginning to explore the idea? Either way, there’s a lot to learn when it comes to assessing your digital supply chain vendors for cyber risk, and it may feel a little bit daunting at first. Perhaps you’re a bit afraid to ask some of the more basic questions that have you stumped.
![caiq sig questionnaires](/sites/default/files/styles/4_3_small/public/2023/02/07/caiq%20sig.jpg.webp?itok=BNLSCDke)
How is one questionnaire different from another, and how do you decide which ones to use in vendor risk assessments? We compare CAIQ vs. SIG.
![Financial Quantification of Cyber Risk](/sites/default/files/styles/4_3_small/public/2021/11/30/financial%20quantification.jpg.webp?itok=9aZiRMT1)
You've worked hard all year to prioritize your organization's resources to tackle the riskiest vulnerabilities in your cybersecurity program. But when you bring your progress to the board of directors, excited to demonstrate your success, your reports about patched network configurations, DNS configurations, botnet sinkholes, and more are met with blank stares.
![BitSight + Glass Lewis](/sites/default/files/styles/4_3_small/public/2023/09/13/Bitsight-and-Glass-Lewis.png.webp?itok=I-6CfQr9)
A strong, collaborative, and informed relationship between the Chief Information Security Officer (CISO) and the Board of Directors is essential for maintaining a robust cybersecurity program.
![3 Cybersecurity IT Risk Assessment Templates](/sites/default/files/styles/4_3_small/public/migration/images/Thumb-3-Information-Security-Risk-Assessment-Templates-To-Get-You-Started-Quickly_1.jpg.webp?itok=jyE3Nzw_)
Developing a VRM plan from scratch or looking to scale your existing program? Here are some cybersecurity IT risk assessment templates to help you get started.
![supply chain resilience](/sites/default/files/styles/4_3_small/public/2022/09/16/shutterstock_2072769434.jpg.webp?itok=Ha6ObOvF)
Learn how to improve supply chain resilience and combat third-party risk through continuous, automated monitoring of your vendors’ risk postures.
![How to Conduct a Supply Chain Risk Assessment at Scale](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1458256181_1.jpg.webp?itok=dQ0YPTdc)
Vendors and third party partners are essential to helping your business grow and stay competitive. But outsourcing to third parties also dramatically increases your attack surface. A recent independent study by Opinion Matters found that 92% of U.S. organizations have experienced a breach that originated with a vendor.
![What Are the Responsibilities of Chief Information Security Officer?](/sites/default/files/styles/4_3_small/public/migration/images/cybersecurity-money-managers-cartoon_1.jpg.webp?itok=5OoS60Pf)
In today’s business environment, companies are often focused on how to best use technology to acquire new customers and improve the customer experience, as these IT applications help generate revenue for the organizations. But every CISO knows the more IT infrastructure connected to a system, the larger the organization’s attack surface is—which translates to more cyber risk.
![CISO Education Requirements: Degrees, Training Courses, and Certifications](/sites/default/files/styles/4_3_small/public/2022/06/08/AdobeStock_232968888_1.jpg.webp?itok=BinrDNl-)
About 25 years ago, the evolution of the overall digital ecosystem necessitated the creation of the first CISO role. Now, 61% of companies have a CISO.
![Industrial Control Systems are Exposed-Breaking Down the Risks](/sites/default/files/styles/4_3_small/public/2023/10/23/Industrial%20Control%20Systems%20are%20Exposed-Breaking%20Down%20the%20Risks.jpg.webp?itok=gMS15TYY)
Recently, organizations were alerted to nearly 100,000 exposed ICS, potentially allowing an attacker to access and control physical infrastructure. Discover the risks.
![CISO's Board Report Cyber Security Toolkit](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1031044363_2.jpg.webp?itok=1z2cfhuT)
When it comes to reporting to the board, there are plenty of tools at the CISO’s disposal. Looking at the right metrics and putting them in the right context can help turn your next board meeting into a source of confidence, not stress. Here are some helpful tips to create successful frameworks for your board reports.
![Technology Resiliency & Outsourcing (TRO): Familiarize Yourself](/sites/default/files/styles/4_3_small/public/migration/images/Technology_Resiliency__Outsourcing_TRO_Familiarize_Yourself_-_thumb_1.jpg.webp?itok=Fj6fURkG)
In a recent Huffington Post article, Shared Assessments senior director Tom Garrubba discussed how third-party risk management has become an important topic to many executives and board members around the world. He recalls a conversation he had with Robin Jones, a member of the U.K.’s Financial Conduct Authority (FCA), during a conference in London. Jones expressed that his “unit [has been] paying renewed focus on technology resiliency and outsourcing.”
![CISOs Tactics To Win Every Budget Battle Blog](/sites/default/files/styles/4_3_small/public/2023/02/09/CISOs-Tactics-To-Win-Every-Budget-Battle-Blog.png.webp?itok=NRMtUT5e)
A recent report from Forrester called CISOs’ Tactics to Win Every Budget Battle suggests that companies turn towards “growing revenue, customer retention, and operating in specific verticals and regions” to gain security budget.
![critical security controls](/sites/default/files/styles/4_3_small/public/2021/11/14/shutterstock_1760911889.jpg.webp?itok=Sb5eM3Ws)
As cyber threats evolve and business models change, maintaining a mature cybersecurity program can be challenging. You need to be confident that your organization’s current security tools and techniques are effective.
![Balancing risk and compliance management](/sites/default/files/styles/4_3_small/public/2022/03/14/Risk%20vs%20Compliance.jpg.webp?itok=vdYEEA3E)
Compliance vs. Risk management. How your organization can unify its efforts to ensure cyber resilience.