
SecurityScorecard Blog
Read the latest blog posts published weekly.
-
Blog
Introducing SecurityScorecard MAX
January 25, 2024Introducing SecurityScorecard MAX: Elevate your supply chain cyber risk management with our comprehensive, AI-driven solution. MAX combines expert insights and advanced technology to identify, prioritize, and resolve critical vulnerabilities in your vendor ecosystem. Protect your enterprise from emerging threats and ensure operational efficiency with MAX's fully managed service, tailored for both Fortune 500 companies and growing businesses. Discover how MAX transforms cybersecurity strategy, offering collective defense and proactive services like penetration testing. Take your supply chain cyber risk to the MAX with SecurityScorecard.
More DetailsServices -
Blog
Leveraging Collaboration and Transparency: How CISOs Can Comply With New SEC Regulations
January 25, 2024As we kick off 2024, CISOs at public companies will certainly be thinking of new regulations from the U.S. Securities and Exchange Commission (SEC) on security incident reporting, effective December 15, 2023. The new regulations demand unprecedented transparency and collaboration from CISOs. Open communication with the C-Suite and third-party partners will be a critical tool for maintaining compliance with the SEC’s new rules.
More DetailsServices -
Blog
The Evolution of CISOs and Security Ratings
January 25, 2024Just like security ratings, the role of the CISO continues to evolve and they’ve had to become more strategic at prioritizing threats and vulnerabilities, especially in the wake of the SEC charges against SolarWinds and their CISO for defrauding investors.
More DetailsMark Weatherford, Chief Strategy Officer at the National Cybersecurity Center
Executive Viewpoint, Security Ratings -
Blog
SecurityScorecard Returns to the World Economic Forum’s Annual Meeting: Our Top 5 Insights
January 25, 2024Last week, SecurityScorecard was invited back to participate in the World Economic Forum’s Annual Meeting in Davos, Switzerland. It was a tremendous honor and, once again, we were the only security ratings company present (and one of the few cybersecurity companies).
More DetailsAleksandr Yampolskiy & Sachin Bansal
Executive Viewpoint -
Blog
Introducing the Cyber Resilience Scorecard: SecurityScorecard Finds Global Cyber Risk and GDP Closely Linked
January 15, 2024SecurityScorecard has published the first Cyber Resilience Scorecard, offering leaders and decision-makers a comprehensive and global view of global cyber risk. SecurityScorecard identified a strong correlation between a country's cyber risk exposure and GDP, which underscores that a nation's economic prosperity is deeply intertwined with its ability to navigate the complex landscape of cyber threats.
More DetailsCyber Threat Intelligence -
Blog
Threat Intelligence Research: Volt Typhoon Compromises 30% of Cisco RV320/325 Devices in 37 Days
January 11, 2024The SecurityScorecard Threat Research, Intelligence, Knowledge, and Engagement (STRIKE) Team has been investigating covert infrastructure linked to Volt Typhoon, a state-sponsored threat actor group believed to act on behalf of the People’s Republic of China. The group conducts multiple types of cyberattacks, but its use of compromised small office and home office (SOHO) equipment such as routers and firewalls is a recurring theme.
More DetailsCyber Threat Intelligence -
Blog
Introducing Security Ratings for Telecommunications, Internet Service Providers, and Cloud Providers: Collaborating on enhancements with industry leaders
January 9, 2024Telecommunications, Internet Service Providers, and Cloud Providers are some of the most critical sectors on the planet. But they are also prime targets for nation-state attacks and other threat actor groups. And their reliance on vast networks of third-party vendors, partners, and service providers creates a need for a comprehensive cybersecurity approach tailored specifically to the sector.
More DetailsSecurity Ratings -
Blog, Learning Center
What is Cyber Attack Insurance? Best Practices To Protect Your Organization
January 5, 2024Cyber attack insurance is increasingly essential to protect your organization from cyber threats and their consequences. Learn more.
More DetailsCyber Insurance, Tech Center -
Blog
In-Depth Review: How SecurityScorecard Stacks Up Against UpGuard in 2024
December 23, 2023More DetailsSecurity Ratings -
Blog
Applying the Churchill Knowledge Audit to Cybersecurity: The Importance of Security Ratings
December 19, 2023As a CISO, I am frequently pitched by companies promising to transform or revolutionize my job. I shrug off most pitches because they don’t add any value to what I’m doing. But every once in a while, an organization comes along that offers something new.
More DetailsAndrew Jaquith, Board Advisor
Executive Viewpoint -
Blog, Learning Center
Optimizing Incident Response with Advanced Threat Intelligence
December 14, 2023Here's how modern threat intelligence tools can refine and improve an organization's incident response strategies.
More DetailsCyber Threat Intelligence, Tech Center -
Blog
C-Suite Liability & Cybersecurity: Navigating a New Era of Enforcement
November 22, 2023It’s well established that corporate directors have fiduciary “duties of care” to protect their companies against major risks and compliance failures. Only recently have courts clarified that these duties now extend to the C-Suite -- CEOs, CISOs, GCs and other key executives now face personal liability for failing to safeguard their companies.
More DetailsOwen Denby, General Counsel, SecurityScorecard
Executive Viewpoint