Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![BitSight Research Highlights Financial Services Security Ratings in the UK](/sites/default/files/styles/4_3_small/public/migration/images/bigstock--223438498_2.jpg.webp?itok=jwVkWTyb)
Over the last several years, cybersecurity regulations (like NYDFS and GDPR) have placed pressure on the financial services industry to build and enforce some of the strongest risk management programs across any industry. These programs focus not only on internal security performance, but also on managing third party risk. Financial service organizations are both highly regulated and handle extremely sensitive personally identifiable information (PII), and as a result typically have higher security budgets when compared to other industries.
![3 Cybersecurity Risk Factors Financial Institutions Often Overlook](/sites/default/files/styles/4_3_small/public/migration/images/3_Cybersecurity_Risk_Factors_Financial_Institutions_Often_Overlook_1.jpeg.webp?itok=Hc-05E1f)
With every reported data breach or cyberattack, the cyber risk landscape gets a little more complex. Cyber criminals create new attack vectors, cybersecurity professionals develop new controls to protect their systems, the criminals get to work circumventing the controls, and so on.The result of this back and forth is that cyber risk professionals have a huge variety of risk factors to worry about. In response, risk managers and security specialists need to develop extremely complex cybersecurity programs to make sure all of their bases are covered. With so many cybersecurity risks to consider, it’s inevitable that some will receive less attention than they deserve. Unfortunately, these overlooked risk factors could play a role in your next cyberattack, and if your financial services firm isn’t prepared, that could be extremely costly. Here are a few historically overlooked risk factors that deserve some additional attention:
![BitSight Releases New VPNFilter & Oracle Weblogic Vulnerability Identification Filters](/sites/default/files/styles/4_3_small/public/migration/images/Woman-Desktop-Security-Ratings-Overview-3_1.png.webp?itok=Dvs5UCQd)
Within the Bitsight Security Ratings platform, we prioritize features that help organizations both identify and manage risks across their own networks and the networks of their third parties. Bitsight now enables users to identify organizations who are potentially vulnerable to VPNFilter malware or Oracle’s WebLogic server problems.
![BitSight Raises $60 Million in Series D Funding To Further Cement Status as Security Ratings Leader](/sites/default/files/styles/4_3_small/public/migration/images/7.2-Blog-BitSight-Series-D_2.jpg.webp?itok=XE-XwYsJ)
Last Thursday, Bitsight announced the closing of our Series D Round of funding. Not only is this important for our company, it is also extremely significant for the security and risk market as a whole.
![EU NIS Directive: The European Union’s First Cybersecurity-focused Legislation](/sites/default/files/styles/4_3_small/public/migration/images/6.15-Blog-EU-NIS-Image_1.jpg.webp?itok=c8cRBjIk)
Last month, the EU NIS Directive (Directive on Security of Network and Information Systems) went into effect. This directive is the first EU-wide piece of legislation specifically focused on cybersecurity. Its goal is to “achieve a high common level of security of network and information systems within EU.” Network and information systems, and the essential services they support, play a vital role in society; their reliability and security are essential to everyday activities.
![Many Third-Party Risk Management Programs are Missing Continuous Monitoring](/sites/default/files/styles/4_3_small/public/migration/images/bigstock--183364126_1.jpg.webp?itok=4CN_Lxdr)
If you’ve done your homework as a cybersecurity professional, then you know that third-party vendors with substandard security controls and processes could be putting your organization at risk.
![BitSight Joins Local Boston Companies Participating in Annual Pride Parade](/sites/default/files/styles/4_3_small/public/migration/images/BitSight-Boston-Pride-2_1.png.webp?itok=850LYmbN)
On June 9th, a Bitsight team participated in the annual Boston Pride parade for the first time. Boston Pride is a celebration of the city's LGBTQ community and its allies that brings thousands of marchers and spectators into the streets. The parade finishes with a festival at City Hall.
![Make Security Benchmarking a Reality](/sites/default/files/styles/4_3_small/public/migration/images/Make_Security_Benchmarking_a_Reality-013027-edited_2.jpeg.webp?itok=wJ9QVOUl)
Most organizations are accustomed to benchmarking certain business areas like sales, profits, and resource allocation. These areas all have one thing in common — they are easily measured with simple, quantifiable metrics.
![How Security Ratings Can Help Organizations Adhere to Hong Kong’s Cybersecurity Guidelines](/sites/default/files/styles/4_3_small/public/migration/images/bigstock--216042772_1.jpg.webp?itok=F7J8UGoo)
The implementation of many strict cybersecurity regulations and requirements (including GDPR, NYDFS, and more) continues to increase on a global scale. 2018 has also brought about the continuation of strict cybersecurity regulations in the Asia Pacific region: most notably in Singapore, Australia, and Hong Kong. This year, one new requirement from 2017, the Securities & Futures Commission’s Guidelines, go into effect.
![Why Establishing Cybersecurity Benchmarks is a Must for Organizations](/sites/default/files/styles/4_3_small/public/migration/images/Why_Establishing_Cybersecurity_Benchmarks_is_a_Must_for_Organizations-125630-edited_1.jpeg.webp?itok=4D-2x0tp)
Effective cybersecurity involves regularly assessing the effectiveness of your organization’s policies, tools, and processes to ensure you’re staying ahead of the curve. In order to gain insight into your cybersecurity performance, you need clear, continuous, actionable metrics that you can track over time and compare to peers, competitors, and across business units.
![The State of Security in the Boardroom](/sites/default/files/styles/4_3_small/public/migration/images/5.18-SecurityinBoardroom-Blog_2.jpg.webp?itok=pOa1S1SG)
In today’s evolving cyber risk landscape, Boards of Directors are becoming increasingly concerned about their company’s security performance. In fact, the NACD has found that 89% of public companies and 72% of private companies regularly discuss security at Board meetings. While they are asking for updates on enterprise cybersecurity posture more often, they do not necessarily have the expertise or experience to know what to ask for — or how to interpret the technical information presented to them.
![7 Cyber Security KPIs That Will Resonate On A Cybersecurity Dashboard For Your Board of Directors](/sites/default/files/styles/4_3_small/public/2023/06/22/7%20Cyber%20Security%20KPIs%20That%20Will%20Resonate%20On%20A%20Cybersecurity%20Dashboard%20For%20Your%20Board%20of%20Directors.jpg.webp?itok=XIyINUWV)
Quantifying and tracking your cybersecurity performance so you can compare your organization to others, also known as benchmarking, is necessary to improving the effectiveness of your security programs.
![What to Expect in Your CISO’s Cybersecurity Presentation](/sites/default/files/styles/4_3_small/public/migration/images/5.4-Board-Member-CISO-Cybersecurity-Presentation-Blog_1.png.webp?itok=lGeX72XZ)
As a member of your company’s board, you know that cybersecurity is a critical risk that simply cannot be ignored, and that should be reported on regularly by the appropriate executives. According to the 2017 NACD Director’s Handbook on Cyber-Risk Oversight, 89 percent of public-company directors say cybersecurity is discussed regularly in board meetings, and 72 percent of private-company directors say the same. Most companies are clearly moving in the right direction.
![Why We Collaborated with Verizon on the Verizon Risk Report](/sites/default/files/styles/4_3_small/public/migration/images/Verizon-Risk-Review-Blog_1.jpg.webp?itok=OmsBRUTL)
Recently, Verizon announced the Verizon Risk Report (VRR), a new managed service offering that provides a security assessment framework to enable customers to gain a comprehensive view of their cyber risk. By combining external cybersecurity ratings, internal analysis, and culture and process assessments, Verizon is able to provide customers with a holistic profile of security performance and current posture, enabling customer to prioritize security investment and mitigate risks.
The launch
The launch
![Building Our UI Design System](/sites/default/files/styles/4_3_small/public/migration/images/component%2520specs_1.png.webp?itok=QTVeNmMa)
As the Bitsight front end team grows we are investing in our design infrastructure to enable faster development, better collaboration, and a more unified look and feel in our product.