Read about the latest cybersecurity news and get advice on third-party vendor risk management, reporting cybersecurity to the Board, managing cyber risks, benchmarking security performance, and more.
Insights blog.
Slicing through CISA’s KEV Catalog
![Blog Image KEV Research Announcement](/sites/default/files/styles/cta/public/2024/05/01/Blog%20Image%20KEV%20Research%20Announcement.png?itok=dUMFV8Tg)
Slicing through CISA’s KEV Catalog
Dive into the critical insights of CISA's Known Exploited Vulnerabilities (KEV) Catalog with Bitsight’s latest blog! Discover how KEVs, which signal urgent cybersecurity risks, are being tracked and mitigated across industries. Learn why addressing these vulnerabilities quickly is vital and how it impacts organizational security.
![Vendor Risks: 5 Ways To Improve Third-Party Cybersecurity](/sites/default/files/styles/4_3_small/public/migration/images/Vendor%2520Risks%2520-%2520Improve%2520Third-Party%2520Cybersecurity_1.jpg.webp?itok=Bj9vjS6A)
You can’t go more than a few weeks (or sometimes a few days) without hearing about yet another company whose data was compromised after hackers gained access through a third-party vendor. These attacks show that it’s no longer enough to secure only your own network from cyber attacks—you have to ensure your vendor networks are secured as well.
![BitSight Executive Chairman of the Board Receives Recognition By Ronald McDonald House](/sites/default/files/styles/4_3_small/public/migration/images/ronald-mcdonald-house-blog-full_1.png.webp?itok=r0FRxiFV)
Over 15 years ago, Shaun McConnon, Bitsight’s former CEO and current Executive Chairman of the Board, became involved with giving back to the local Boston community. Shaun and his wife, Bonnie, sat on the Board for a Sudbury-based charity benefitting children with cancer, which was affiliated with the first Proton Beam at Massachusetts General Hospital (MGH).
![The 8-Part GDPR Compliance Checklist For Prepared Organisations](/sites/default/files/styles/4_3_small/public/migration/images/GDPR%2520compliance%2520checklist%2520full_1.jpg.webp?itok=DSEQkEU8)
The May 2018 deadline for General Data Protection Regulation (GDPR) compliance is drawing closer — which means your organisation’s compliance activities should be well underway. But if you’re still looking for a place to start, here’s a GDPR checklist template to get you going:
![The Importance of Speed in Driving Business Value Through Your VRM Program](/sites/default/files/styles/4_3_small/public/migration/images/11.21-Speed-VRM-Blog-Thumb_1.png.webp?itok=PhtwSRyf)
In today’s expanding business ecosystem, managing vendor risk is becoming increasingly critical to protecting companies’ sensitive data. With new threats emerging daily and companies continuing to outsource, vendor risk management is an issue that will only grow in affecting organizations and their business partners. According to a recent Navex Global study, the ability to promptly resolve newly identified risks is a top challenge for organizations’ third party risk management programs.
![Examining The Growing Cyber Risk Gap](/sites/default/files/styles/4_3_small/public/migration/images/11.17-Blog-Thumbnail_1.png.webp?itok=ZCv9J3Ah)
In today’s business world, the desire to transact in the digital realm is dramatically accelerating and, unfortunately, so is the cyber risk that one takes on as a result. Organizations that handle sensitive data are more likely to become the targets of hackers who are looking to exploit this information stored within their network. Businesses now find themselves exposed to a growing “Cyber Risk Gap.” This gap is the outcome of the combined impact of the following:
![How Mature Is Your Cyber Risk Underwriting Strategy?](/sites/default/files/styles/4_3_small/public/migration/images/How-Mature-Is-Your-Cyber-Risk-Underwriting-Strategy_1.jpg.webp?itok=vkjA5Ps4)
If I were to ask you whether your cyber risk underwriting strategy is mature, your first question would likely be: “How do you define mature?” It’s a great question! Here’s the answer: A mature cyber risk underwriting strategy considers all relevant underwriting issues when assessing an applicant's or insured’s risk profile.
![BitSight Reaches Milestone of 110K Human Validated Organizations](/sites/default/files/styles/4_3_small/public/migration/images/11.10-110k-blog-thumb_1.png.webp?itok=X1JT3Lrt)
This October, Bitsight celebrated another very important milestone as the leader and pioneer of the security ratings market: now, Bitsight has high-quality, historical data on over 110,000 global organizations at users’ fingertips.
![3 Steps for Building A Third-Party Continuous Monitoring Plan](/sites/default/files/styles/4_3_small/public/migration/images/Third-Party%2520Continuous%2520Monitoring%2520Plan%2520-%2520thumb_1.jpg.webp?itok=xlJk7Fe5)
In today’s security climate, talk of proper cybersecurity procedures must include discussion of a continuous monitoring plan that applies both internally and externally (with the company’s third-party vendors). And while continuous monitoring is critical to the health and well-being of your company, it’s also incredibly challenging to do.
![How & Why U.S. Businesses Should Prepare For GDPR](/sites/default/files/styles/4_3_small/public/migration/images/thumb-general-data-protection-regulation-gdpr_1.jpg.webp?itok=GSB5v5Py)
As a U.S.-based company, you may be asking yourself, “Does my company need to prepare for the EU’s General Data Protection Regulation (GDPR)?” Simply put, if you process personal data for anyone in the European Union, the answer is very likely yes.
![Information Security In Banking & Finance Industry: 3 Critical Vendor Risks](/sites/default/files/styles/4_3_small/public/migration/images/Information%2520Security%2520In%2520Banking%2520-%2520BitSight_1.jpg.webp?itok=TVGkWjOz)
In a report focused on cybersecurity in the banking and financial sector, Bitsight researchers examined the security performance of more than 5,200 organizations in the Legal, Technology, and Business Services industries. These organizations—monitored by Finance organizations on the Bitsight Security Rating Platform—represent a critical part of the financial services supply chain. Our report shows a number of findings representative of information security in banking and financial industry.
![bitsight-blog](/sites/default/files/styles/4_3_small/public/2024/05/24/bitsight-blog.jpg.webp?itok=-q3o2lKI)
September marked a month of heated discussion concerning data privacy issues, with continuing coverage in the media regarding breaches at major, global institutions. Bitsight looked into the types of breaches experienced by the finance sector over three years of data to determine whether web application compromise is on the rise as well as the impact of these events.
![General Data Protection Regulation (GDPR): 12 Of Your Questions, Answered](/sites/default/files/styles/4_3_small/public/migration/images/thumb-general-data-protection-regulation-summary_1.jpg.webp?itok=kb-EET-r)
The goal of the General Data Protection Regulation (GDPR), which goes into effect in May 2018, is to protect the fundamental rights and freedoms of individuals in the EU as it pertains to their personal data. As you might imagine, it is a broad and complex piece of legislation, with far-reaching implications for businesses inside and outside the EU.
![BitSight’s Newest Alerting Capabilities Showcase Evolution of Leading Security Rating Service](/sites/default/files/styles/4_3_small/public/migration/images/10.20-Blog-Thumb_1.png.webp?itok=Bc_W6r-6)
This August, Bitsight announced the release of several new risk vectors specifically chosen to help organizations identify and manage risks across their own networks and the networks of their third parties. Bitsight chose those new risk vectors to enhance the insights across the “spectrum of risk” and provide a more comprehensive picture of an organization’s security posture.
![5 Tips to Stay Safe During Cybersecurity Awareness Month](/sites/default/files/styles/4_3_small/public/migration/images/10.13-Blog-Thumb_1.png.webp?itok=pSu2_R-_)
October is Cybersecurity Awareness Month, which offers organizations the opportunity to thoroughly examine their security and risk programs and identify where any vulnerabilities might exist. Here at Bitsight, we talk about risk management every day. However, we have to practice what we preach — our IT Team offered some insight into areas where organizations can improve their network health not just this month, but regularly.
![How Security Ratings Can Make Renewals More Effective](/sites/default/files/styles/4_3_small/public/migration/images/-Security%2520Ratings%2520Can%2520Make%2520Renewals%2520More%2520Effective%2520-%2520thumb_1.jpg.webp?itok=OvPWSz0-)
Most insurers find that the cyber insurance renewal process is fairly efficient from a time perspective—but it’s not very effective. In other words, they are able to quickly re-underwrite a company in their portfolio, but don’t have any better understanding about the insured’s security posture to see whether the risk has changed and is still suitable to keep on the books.