Resources
Cybersecurity white papers, data sheets, webinars, videos and more
Resource Library
November 11, 2021
What is Compliance Management and Why Is It Important?
Compliance management is the process of monitoring an organization’s network to ensure they comply with legal and industry requirements. Learn more.
Tech Center
November 11, 2021
What are Information Security Controls?
What are information security controls and what type does my organization need? Learn more on SecurityScorecard’s blog.
Tech Center
October 25, 2021
The Evolution of Cybersecurity Solutions and Threats
To know where cybersecurity solutions are headed, we must know where they came from. Learn more about the evolution of cybersecurity solutions.
Cyber Threat Intelligence
Security Ratings
October 6, 2021
Assessing Cyber Risk: 13 Critical Questions for the Board
Boards of Directors constantly need to be educated about and aware of their organizations’ cybersecurity posture. Check out these 13 questions for the board that provide visibility into the company’s strategy and help assess cyber risk.
Tech Center
October 4, 2021
What are Threat Intelligence Feeds?
Threat intelligence feeds are continuous data streams filled with threat intelligence, providing real-time information on cybersecurity threats. Learn more.
Cyber Threat Intelligence
Tech Center
September 27, 2021
A Guide to Cloud Data Security Best Practices
Explore best practices for cloud data security that can guide your organization toward a secured cloud infrastructure and mitigate any security risks.
Tech Center
September 15, 2021
What is Security Compliance Management?
Security compliance management is the process of monitoring and assessing systems, devices, and networks to ensure they comply with regulatory requirements, as well as industry and local cybersecurity standards. Learn more on SecurityScorecard’s blog.
Tech Center
September 13, 2021
Understanding the Importance of Cybersecurity Due Diligence
Organizations increasingly rely on third- and fourth-party vendors and service providers to carry out day-to-day operations, expanding their exposure to cyber threats. After analyzing over 12 million companies’ security postures and supporting thousands of M&A transactions, SecurityScorecard has learned that traditional cybersecurity due diligence… Read More
Tech Center
September 9, 2021
Best Practices for Trusted Third-Party Risk Management
Check out these best practices to managing third-party risk for your organization. Learn more.
Supply Chain Cyber Risk
Tech Center
September 8, 2021
What are the Types of Risk Assessments and When to Use Them?
Creating a cyber-resilient organization means understanding your security risks and how to mitigate them. Learn the different types of risk assessments and how to use them so you can make better-informed decisions for your organization.
Tech Center
September 1, 2021
What is the CIA Triad? Definition, Importance, & Examples
What is the CIA Triad? Definition, Importance, & Examples to guide an organization’s security procedures and policies. Learn more below!
Tech Center
August 25, 2021
Compliance vs Risk Management: What You Need to Know
People hear the terms compliance and risk management and assume they are the same. Learn more about the difference between compliance and risk management now.
Tech Center
August 19, 2021
‘The Perfect Scorecard’ Focuses on Communication Between CISOs and the Board
The Perfect Scorecard: Getting an ‘A’ in Cybersecurity from your Board of Directors, is an attempt to close that gap. The Perfect Scorecard features insights from 17 leading CISOs and executives known for their leadership skills and their ability to communicate across roles and sectors.
Security Ratings
August 16, 2021
10 Best Practices to Prevent DDoS Attacks
Distributed Denial of Service (DDoS) attacks spiked in recent years, fueled by the growing reliance on digital infrastructure and the expanding attack surface created by hybrid work environments and always-online services. According to a report from NETSCOUT, almost… Read More
Tech Center
August 11, 2021
How to Design an Effective Cybersecurity Policy
Every year, more than 34 percent of organizations worldwide are affected by insider threats. For that reason, cybersecurity needs to be a priority and concern for each employee within an organization, not only the upper-level management team and IT professionals. Employees tend to be the weakest link… Read More
Tech Center
August 4, 2021
8 Internet of Things Threats and Risks to Be Aware of
The internet of things (IoT) is a highly developed space that is home to a vast amount of sensitive data, making it a very attractive target for cybercriminals. Threats and risks continue to evolve as hackers come up with new ways to breach unsecured systems — posing a threat to… Read More
Tech Center
July 28, 2021
10 Common Cyber Attack Vectors and How to Avoid Them
When it comes to cybercrime, cybercriminals are constantly changing their tactics. Think back to 10 years ago; malware sites — malicious sites that attempt to install malware on a device – were a common attack vector. At the same time, sophisticated ransomware attacks on organizations were rare. Often, ransomware was used to target individuals, sometimes blackmailing them for having been on unsavory sites and asking for a few hundred dollars in ransom.\r\n\r\n
Tech Center
July 12, 2021
8 Top Strategies for Cybersecurity Risk Mitigation
In recent years, there has been a clear rise in threat volume and sophistication as many cybercriminals shift to techniques that can effectively evade detection and easily go after high-value targets. IoT devices are becoming a focus for threat actors, and threats related to credential harvesting and ransomware are also… Read More
Tech Center
July 8, 2021
16 Countries with GDPR-like Data Privacy Laws
Coming into force on May 25th, 2018, the General Data Protection Regulation (GDPR) was a landmark for data protection. Trading blocs, governments, and privacy organizations took note, and over the last three years, GDPR has inspired new data privacy legislation worldwide. In my view, there are two very… Read More
Tech Center
June 28, 2021
What is the ICT Supply Chain? Things Your Business Needs to Know
The ICT supply chain is the sequence of actions that transform raw resources into ICT products and services such as computer hardware, software, and subscriptions. Learn more.
Tech Center
June 22, 2021
What is Access Control? Components and Types
Digital transformation changes the perimeter. When organizations had all their applications on-premises, the network firewall kept the right users inside the gate and malicious actors outside. However, the move to the cloud changed all that. In today’s hyper-connected ecosystem, understanding the components and types of access control can help you strengthen security.
Tech Center