Read news articles covering Bitsight, the leader in security ratings. We're proud to be featured in these leading business & technology publications, journals, blogs, and broadcasts.
In The News
![What prevents companies from achieving effective security performance management?](/sites/default/files/styles/news_grid/public/migration/images/BitSight-HelpNetSecurity_13.png?itok=ILtf7OTH)
![4 Strategies to Identify and Recognize Invisible Wins](/sites/default/files/styles/news_grid/public/migration/images/inc-logo_0.png?itok=52E8AqrL)
At the core of Entrepreneurs' Organization (EO)'s mission is an unrelenting commitment to helping entrepreneurs learn and grow in every stage of business. Adopting an attitude of gratitude in recognizing employee wins is a critical component of success. We asked Tom Turner, CEO of Bitsight, about the importance of uncovering and recognizing invisible wins. Here's what he shared.
![Windows 7 remains an albatross at many large organizations](/sites/default/files/styles/news_grid/public/migration/images/BitSight-TechRepublic_4.png?itok=6NKLFAEi)
Third-party cyber threats are impacting major business decisions, according to a Bitsight and CeFPro report. Here are some of the biggest challenges.
![Global study of financial sector shows deep concern about third party cyber risk](/sites/default/files/styles/news_grid/public/migration/images/RiskXtraWOB-1-1.png?itok=et-4LDd9)
![Companies with good cybersecurity outperform the market](/sites/default/files/styles/news_grid/public/migration/images/file-2431974635_2.png?itok=6aD5n5tp)
Many organizations work with hundreds of third parties, creating new risks that must be actively managed. The financial industry, in particular, has a massive business ecosystem made up of legal organizations, accounting and human resources firms, management consulting and outsourcing firms, and information technology and software providers. A new study into the financial services sector from security ratings company Bitsight finds that 97 percent of respondents say cyber risk affecting third parties is a major issue.
![Understanding the most critical risks to your business](/sites/default/files/styles/news_grid/public/migration/images/Enterprise-Times-logo-544-2_14.png?itok=yE-1wuaZ)
This podcast was recorded with Jake Olcott, VP of Government Affairs at Bitsight. The discussion focused on the recent research that Bitsight carried out with the Center for Financial professionals (CeFPro). The research focused on third party cyber risk and produced some interesting highlights.
![CISOs forced to use worst-case scenarios to gain board attention](/sites/default/files/styles/news_grid/public/migration/images/BitSight-SC-Mag_35.png?itok=Iqf0bAJ8)
For a view from the outside looking in, SC Media UK spoke to Jake Olcott, VP Government Affairs at Bitsight, who has previously served as legal advisor to the Senate Commerce Committee and as counsel to the House of Representatives Homeland Security Committee in the United States. "Organisations who were working with UK businesses may need to think about introducing new vendors and suppliers into their environment" Olcott warns "changing their existing relationships with a trusted supply chain." This will likely introduce greater risk to the business from a cyber-security perspective, of course.
![Billion-dollar privacy penalties put CEOs on notice](/sites/default/files/styles/news_grid/public/migration/images/computer-weekly_0.jpg?itok=pWGx1XfY)
Meanwhile, cybersecurity rater Bitsight is warning of the dangers of partnerships between attractive but insecure financial technology (fintech) startups and traditional banks. As it launched its Peer Analytics service at the RSA Conference for IT security in San Francisco, Bitsight warned that third-party partnerships were an emerging source of danger for banks. “The banks’ methods of risk assessment need updating,” said Bitsight’s vice-president of government affairs, Jake Olcott.
![Kaspersky Labs unveils another supply-chain threat](/sites/default/files/styles/news_grid/public/migration/images/telecoms-dot-com_0.png?itok=bkUZ3U3W)
“Supply chain risk is one of the biggest challenges in cyber today. Tech companies issuing remote patching and remote updates to customers are increasingly targeted because of their broad, trusted relationships with their customers,” said Jake Olcott, VP Government Affairs at Bitsight. “Companies must conduct more rigorous diligence and continuously monitor these critical vendors in order to get a better handle on this risk.”
![DHS Tests Remote Exploit for BlueKeep RDP Vulnerability](/sites/default/files/styles/news_grid/public/migration/images/dark-reading_38.png?itok=tMqkRaY0)
Tech companies that issue remote patches and remote updates to customers are big targets for attackers because of their broad trusted relationships with customers, says Jake Olcott, vice president at Bitsight. "As a risk management best practice, organizations must identify their most high-risk vendors, include security performance requirements in contracts with those suppliers, and monitor the cyber posture of those suppliers on an ongoing basis," he says. The challenge is that such assessment and monitoring process can be extremely time-consuming, he says. But simply turning a blind eye to this risk all together can have detrimental consequences, he notes.
![CISOs forced to use worst-case scenarios to gain board attention](/sites/default/files/styles/news_grid/public/migration/images/BitSight-SC-Mag_35.png?itok=Iqf0bAJ8)
Bitsight Vice President Jake Olcott said supply chain risk presents one of the biggest cybersecurity challenges today. “Tech companies issuing remote patching and remote updates to customers are increasingly targeted because of their broad, trusted relationships with their customers,” Olcott said. “Companies must conduct more rigorous diligence and continuously monitor these critical vendors in order to get a better handle on this risk.”
![BitSight offers data to help insurers evaluate cyber risk for SMBs](/sites/default/files/styles/news_grid/public/migration/images/IBSI-logo_1.png?itok=5ET_6b6k)
Security ratings player Bitsight has launched a new capability for insurers that delivers security performance information on millions of small- and medium-sized insurance applicants in seconds, enabling underwriters to evaluate and price cyber risk for the SMB market. Bitsight said the underwriting assessment leverages its security ratings platform and provides trustworthy security performance information. “Nearly half of the global cyber premium is written by Bitsight’s insurance customers, so we understand the unique challenges facing this community,” said Samit Shah, Insurance Strategy and Operations Manager at Bitsight. “As insurers expand their cyber coverage to small and medium-sized businesses, they must quickly obtain high quality, accurate, meaningful security performance data in order to assess the risk of an applicant and determine pricing. Bitsight is making it easier, faster and more cost-effective than ever for insurers to evaluate SMB cyber risk and issue policies.”
![What actually happens when a company examines third-party risk](/sites/default/files/styles/news_grid/public/migration/images/CyberScoop-RGB-Trans_0.png?itok=Kak5Fh_j)
“One of the most critical business dynamics that’s taken place over the past five years is businesses holding each other accountable for cybersecurity,” said Jacob Olcott, vice president at Bitsight. “Market participants are holding each other accountable but, my god, have you ever tried to figure out a questionnaire? It’s completely subjective, so in an ideal world it would be a combination of security ratings plus the results of assessments or documentation.”
![The Latest Tips to Secure Your Organization Against Ransomware](/sites/default/files/styles/news_grid/public/migration/images/fiercehealthcare-logo.png?itok=gaY00CGR)
![BitSight offers data to help insurers evaluate cyber risk for SMBs](/sites/default/files/styles/news_grid/public/migration/images/IBSI-logo_1.png?itok=5ET_6b6k)
Partnerships between big banks and agile fintech companies are being put at risk by the perceived insecurity of startups, according to cybersecurity auditor Bitsight.
Security rater Bitsight unveiled its Peer Analytics service at the RSA Security Conference in San Francisco on March 8th. Speaking after the event, the vendor’s VP of government affairs, Jake Olcott, warned that third-party partnerships are an emerging source of danger for banks.