Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Meet Our Customer Success Team: André Mártires Agostinho](/sites/default/files/styles/4_3_small/public/migration/images/Customer-Success-Blog-Full_46.png.webp?itok=8mryN1Um)
Check out this Q&A with a London-based member of Bitsight's Customer Success team to learn about her role as an Customer Success Manager, her experience, and more.
![Meet Our Customer Success Team: André Mártires Agostinho](/sites/default/files/styles/4_3_small/public/migration/images/Customer-Success-Blog-Full_46.png.webp?itok=8mryN1Um)
Check out this Q&A with a Lisbon-based member of Bitsight's Customer Success team to learn about her role as an EMEA Customer Success Manager, her experience, and more.
![How Universal Health Services Could Have Avoided A Ransomware Attack](/sites/default/files/styles/4_3_small/public/migration/images/UHS%2520ransomware%2520blog%2520post%2520image_1.jpg.webp?itok=e3IphnEc)
Over the weekend of September 26th, major healthcare provider Universal Health Services experienced a ransomware attack resulting in widespread computer systems failures. Without access to their digital databases, doctors and nurses were forced to resort to pen and paper notes, postpone medical treatment, and work through gaps in medical history for patients needing care; all during an already high-pressure time for health care workers fighting the global COVID-19 pandemic.
![Meet Our Customer Success Team: André Mártires Agostinho](/sites/default/files/styles/4_3_small/public/migration/images/Customer-Success-Blog-Full_46.png.webp?itok=8mryN1Um)
Check out this Q&A with a US-based member of Bitsight's Customer Success team to learn about her role as a Customer Success Manager, her experience, and more.
![Meet Our Customer Success Team: André Mártires Agostinho](/sites/default/files/styles/4_3_small/public/migration/images/Customer-Success-Blog-Full_46.png.webp?itok=8mryN1Um)
Check out this Q&A with a Lisbon-based member of Bitsight's Customer Success team to learn about his role as a Senior Customer Success Manager, his experience, and more.
![Can Your Vendor Assessments Be More Efficient?](/sites/default/files/styles/4_3_small/public/migration/images/VendorAssessment_BlogImage_1.jpg.webp?itok=ggSZ3Bcp)
If you’re using a “one-size fits all” approach to managing your vendor lifecycle, you are missing opportunities to save money and operate more efficiently. Vendor management efficiencies don’t end in the onboarding stage: using a continuous vendor monitoring approach will help you better manage your third parties you worked so hard to onboard.
![How to Make More Informed, Data-Driven Security Decisions](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_302638517_1.jpg.webp?itok=OlxxqZoo)
Data can be the key to making more informed, strategic cybersecurity decisions — and ensuring you’re spending your security dollars effectively. In order to get the most out of your increasingly limited security resources and meet or surpass industry benchmarks, you need visibility into the relative performance of your security program — and insight into the cyber risk present across your ecosystem.
![NIST Cybersecurity Framework Now Includes Guidance For Federal Agencies](/sites/default/files/styles/4_3_small/public/migration/images/bigstock--192553642_1.jpg.webp?itok=_6kSxsMd)
Recently, the National Institute of Standards & Technology (NIST) released a guide for federal agencies to apply the NIST Cybersecurity Framework to government affairs. This comes during a time of heightened attention on the government’s cybersecurity efforts leading up to the election.
![The Latest Cybersecurity Trends in State Government Entities](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_669226078_1.jpg.webp?itok=kJVaBcJX)
It should come as no surprise that the cybersecurity landscape has been changing dramatically throughout the year 2020. According to Bitsight research, up to 85% of the workforce in some industries has shifted to remote work in response to the COVID-19 pandemic — introducing corporate devices to a variety of new and evolving cyber threats. While malicious actors are taking advantage of this opportunity to advance their nefarious objectives, security teams are racing to adapt to our “new normal” operating environment so that they can continue to effectively mitigate risk across their growing attack surfaces.
![5 Ways to Transform Your Security Program](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1065742220_1.jpg.webp?itok=4fzq4KoQ)
Between difficulty communicating with boards and executives, decreasing budgets, and difficulty measuring how exactly risk was being reduced, security leaders are under pressure to change the way they do things. The situation for security leaders was already changing heading into 2020, with decreasing budgets and increasingly skeptical boards citing little change in security performance to show for their investments.
![U.S. Election Security, Part 1: Voting Systems Vendors’ Cybersecurity is Improving](/sites/default/files/styles/4_3_small/public/migration/images/US_ElectionSecurityPart1_BlogImages_1.jpg.webp?itok=VNGiY9VU)
Significant concerns have been raised about the security of the 2020 United States election. Hundreds of millions of dollars in Federal funding has been made available to state and local governments to improve the security of election systems and remediate vulnerabilities within critical organizations. Congressional hearings have highlighted risks to electronic voting systems and the vendors who manufacture them. Government task forces have been created to address the challenge.
![Who’s Ready for the CMMC? What Data Reveals About Defense Sector Cybersecurity](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_157332656_1.jpg.webp?itok=siC2xAko)
In the upcoming months, the Cybersecurity Maturity Model Certification (CMMC) will go live. Thousands of third party assessors will begin cybersecurity assessments of hundreds of thousands of U.S. Defense contractors. What will the assessors find?
![4 Ways Security Leaders Can Lead Business Transformation](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_1105484522_1.jpg.webp?itok=iHMZpHxA)
It’s easy to forget that cybersecurity teams were facing significant headwinds going into 2020. After years of ever expanding budgets, new tech and new tools, a string of public breaches (in spite of the growing spend), hard questions from the board, and outcomes that were difficult to measure all raised significant questions for security and risk leaders as well as the industry in general.
![Automation: The Key to Optimizing Your Risk Assessment Process](/sites/default/files/styles/4_3_small/public/migration/images/shutterstock_525065503_1.jpg.webp?itok=IyjU6GD5)
In response to the global COVID-19 pandemic, more employees have been working from home over the past several months than ever before. In fact, during the period of March 2020, we looked at a sample size of 41,000 organizations and found that up to 85% of the workforce in some industries had shifted to remote work.
![3 Ways to Improve Your Vendor Lifecycle & Make it More Efficient](/sites/default/files/styles/4_3_small/public/migration/images/3%2520ways%2520to%2520improve%2520vendor%2520lifecycle%2520management%2520blog_1.jpg.webp?itok=709DHoAh)
During this dynamic and stressful workplace environment 2020 has brought us, finding the most efficient ways to perform in your job has never been more important. When it comes to managing your vendor lifecycle, there are three ways you can implement more efficient processes to save time and money for your business.