Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![BitSight EXCHANGE Sound Bites: Risk Management in Financial Services](/sites/default/files/styles/4_3_small/public/migration/images/finance-panel-exchange_1.jpeg.webp?itok=649lxlVu)
In the months since Bitsight’s inaugural EXCHANGE forum, we have been digesting and processing the incredible sessions and discussions that came about from this forum. It was a great event that brought together security executives from all over to discuss the challenges they face in their roles every day.
![What’s Behind Your Risk Matrix?](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Matrix-Data-Stream-Design-Ele-270231442_1.jpg.webp?itok=Ufdot2HV)
This quarter, Bitsight released several new product features that enable organizations to more rapidly assess, prioritize and manage cyber risk. These new capabilities — the Portfolio Risk Matrix and Asset Risk Matrix — leverage Bitsight’s market-leading data to provide risk prioritization, helping customers address the most important risks within their own environment as well as their broader third-party ecosystem.
![Cybersecurity in Europe is Improving: Thank You GDPR?](/sites/default/files/styles/4_3_small/public/migration/images/bigstock--219346900_1.jpg.webp?itok=6n15gyLr)
After years of debate over whether to impose new cybersecurity regulations on companies, General Data Protection Regulation (GDPR) laws went into effect in Europe in May 2018. Already we’ve seen several data breach victims ordered to pay fines under the new rules and cookie disclosure notices are popping up on more websites than ever.
![Forecasting: The Missing Link in Your Annual Security Performance Planning Process](/sites/default/files/styles/4_3_small/public/migration/images/11.29-Forecasting-Blog-Header-Image_1.jpg.webp?itok=HB-lM65g)
When it comes to security performance management within your organization, how do your security teams measure performance? If they’re using security ratings, they know that this objective, quantitative measurement is an effective place to start when evaluating performance in certain areas.
![5 Crucial Strategies for Improving Retail Network Security](/sites/default/files/styles/4_3_small/public/migration/images/6.%2520retail%2520security_1.jpg.webp?itok=4qmAQgNY)
The retail sector has proven that when top minds put their heads together, they can make real headway against pernicious cyber threats. Case in point: the industry-wide adoption of EMV chip cards has played a role in reducing point-of-sale malware attacks by 93% since 2014.
![Forrester Recognizes BitSight as a Leader in Cybersecurity Risk Rating Solutions](/sites/default/files/styles/4_3_small/public/migration/images/bigstock--------223858897_2.jpg.webp?itok=bMn39N9F)
This past Tuesday, Bitsight was named a Leader in The Forrester New Wave™: Cybersecurity Risk Rating Solutions, Q4 2018 evaluation. This report evaluates the current offering and strategy of vendors in a particular technology market, such as security ratings. This is significant, as this is the first analyst report that has a core focus on evaluating security ratings services solutions side-by-side.
![The Board’s Role in Cyber Risk Management: Advice from Top Directors](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Business-Team-Meeting-Present--253202224_1.jpg.webp?itok=pYohAbIJ)
In today’s evolving threat landscape, corporate directors are increasingly asking for security performance updates from Chief Information Officer, Chief Information Security Officers, Chief Risk Officers, and other executives.
![Improve IT Vendor Monitoring with Data-Driven Conversations](/sites/default/files/styles/4_3_small/public/migration/images/IT%2520Team-Improve-IT-Vendor-Monitoring_2.jpg.webp?itok=7d1FDwo5)
Businesses are becoming increasingly reliant on outsourced IT services to support day-to-day operations.
![The State of Cyber Risk in Spain](/sites/default/files/styles/4_3_small/public/migration/images/bigstock--182719168_2.jpg.webp?itok=P7WEiUFM)
In Spain, cybersecurity is becoming more of a priority among businesses across all industries. One way to quantify these cybersecurity postures is by looking at Spain’s security ratings across all markets. In Spain, Bitsight Security Ratings are on average 119 points below Europe as a whole. The highest performing industry is Real Estate, which has a security rating of 71 security rating points better than the European average. The lowest performing industries are Financial Services and Insurance, which are more than 200 security rating points lower than the average European rating. Given the sensitive data financial services companies possess, this report suggests there is a need for additional investment in cybersecurity and cyber risk management. As companies invest in digital transformation programs, their exposure to risk increases and requires an increased investment in risk management across their organization.
![A Cybersecurity Conversation with the Board: Q&A with James Lam](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Business-people-sitting-in-boa-206016238_1.jpg.webp?itok=BE_EnHqF)
In today’s evolving threat landscape, corporate directors are increasingly asking for security performance updates from Chief Information Security Officers, Chief Information Officers, Chief Risk Officers, and other executives. I recently sat down with James Lam, director at RiskLens and E*TRADE Financial Corp., to discuss Board members’ responsibility when it comes to information security and cyber risk.
![Best Practices for Cybersecurity Awareness Month with Stephen Boyer](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Cyber-Attack-Detection-Intern-243812206_1.jpg.webp?itok=DwtGw9F3)
October was Cybersecurity Awareness Month, which gave companies the opportunity to thoroughly examine their security and risk programs and identify where they can strengthen security practices. A Bitsight, we talk about risk management every day. We sat down with our Co-Founder & CTO, Stephen Boyer, to talk about the significance of having a risk-aware organization and proactive ways security ratings can help with risk management.
![Using Security Ratings to Drive Organizational Performance](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Businessman-using-a-digital-ta-209395744_2.jpg.webp?itok=UzGSTRum)
An increasing number of security and risk teams are using security ratings to effectively assess the impact of their security programs as well as communicate changes to key decision makers — like the Board of Directors. These teams know that their company needs tools that provide an objective and quantitative view of their cybersecurity performance over time.
![Streamline Your Bank's Third-Party Vendor Management Risk Assessments](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Risk-Assessment-on-Ring-Binder-121113230_1.jpg.webp?itok=Z7V1Ibt2)
Banks and other financial institutions are a proving ground for new risk management methods. High risk and intense regulations feed into a culture of serious, comprehensive security — a culture that has manifested in mature methodologies such as the three lines of defense.
![Should Cybersecurity Have a Voice in Vendor Procurement?](/sites/default/files/styles/4_3_small/public/migration/images/3.%2520vendor%2520procurement_1.jpg.webp?itok=TNYkRavb)
Business leaders now realize that their data is being exposed to risk by their vendors, and that monitoring and remediating these threats is a necessary part of an effective cybersecurity program.
![4 Cybersecurity Factors Every Board Member Must Consider for 2019 Planning](/sites/default/files/styles/4_3_small/public/migration/images/bigstock-Business-Woman-Leader-Making-P-253201858_1.jpg.webp?itok=mYkku1Zv)
Cybersecurity is a growing topic of discussion in Board meetings everywhere — given this fact, Board members need to be prepared to speak knowledgeably about their organization’s cybersecurity posture and programs. As businesses near the last quarter of the year and begin their planning processes, Boards must also be thinking about how to best prepare for 2019. Here are some factors that Boards must take into consideration: