Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

SecurityScorecard Enables Cyber Insurers to Shift from Static to Dynamic Loss Control

It’s no secret that loss control programs are essential for cyber insurance. Unlike other forms of insurance where the risk and assets don’t change much during a policy term, cyber insurance is meant to mitigate a constantly evolving risk and cover organizations whose security posture is always changing. A cyber insurance policy could be priced completely differently today compared to a few weeks or months later.

How Patching Thwarts Cyber Attackers

At SecurityScorecard, we analyzed open vulnerabilities across the entire Internet. Here are some of our shocking discoveries: Furthermore, on average, it takes these organizations a year to fix 50% of the vulnerabilities. That's why hackers often have the upper hand. Solution? Build a mature program that: Got questions? Let me know in the comments below. SecurityScorecard is the global leader in cybersecurity ratings and the only service with over 12 million companies continuously rated. The company is headquartered in New York and operates in 64 countries around the globe.

New Features: Third Party Cyber Risk Quantification & Data Transparency

Third party cyber risk can be a lot like the wild wild west - it’s hard to predict where your next loss will come from. We know that third-party cyber events can lead to millions of dollars of loss revenue, remediation costs, regulatory fines & more. That’s why Kovrr has made significant updates to their platform to help put a financial quantification on risk derived from your organization’s third parties.

How to Improve CISO & Board Member Communication

Here is how to establish successful 2-way communication between the board members and CISOs: Beating the learning curve If you’re a board member, it’s not considered okay if you show up to a meeting without knowing what’s EBITA. But it's perfectly acceptable for you to not know security, which is not good. So it’s your responsibility to educate yourself on cybersecurity. Similarly, CISOs need to learn to express technical things in business language. Seeing the CISO as a true business partner

What's the Difference Between Red Teaming and Penetration Testing?

When discussing cybersecurity, “penetration testing” and “red teaming” are two terms that are often used interchangeably but are two entirely separate concepts. If you are considering implementing additional cybersecurity protocols within your organization, it’s essential to understand the unique role and function of each of these processes and how they can benefit your organization.

SecurityScorecard Provides Comments to FERC's Proposed Risk-Based Cybersecurity Rulemaking

SecurityScorecard, the global leader in cybersecurity ratings, commented on the Federal Energy Regulatory Commission’s (FERC or “Commission”) proposal to establish rules for incentive-based rate treatments for certain voluntary cybersecurity investments by utilities. Cybersecurity is among the greatest threats to the resilience and reliability of America’s critical infrastructure, including its electricity infrastructure.

Key Cybersecurity Trends in 2023

Here are 3 key insights for 2023 I’ve gained after talking to dozens of CISOs and CIOs: Their budgets are not decreasing. Even though we see volatile and turbulent market conditions ahead, most CISOs’ budgets are not decreasing. It’s good news that the industry continues to thrive despite the economic headwinds. They are focusing on public and private sector collaborations. Many governments are amping up their security investments in light of the Ukraine conflict.