SecurityScorecard Blog: Security Ratings

One of the key reasons SecurityScorecard commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) Study was to help the market move on from using spreadsheets as a Vendor Risk Management (VRM) tool. The primary ... Keep Reading

On May 12, 2021, President Biden issued an executive order (EO) that aims to add more transparency into the software supply chain with recommended best practices and a pilot program for consumer software labeling aimed at improvin... Keep Reading

Security ratings may seem simple — they provide you with an easy-to-understand assessment of your security posture, and the cybersecurity of other organizations, like vendors and suppliers. However, security ratings can be used ... Keep Reading

Like most emerging markets, security ratings has it’s skeptics. Reasonable people have disagreed about the effectiveness and diagnostic value of security ratings. Their questions typically follow these lines of thought: I don’t b... Keep Reading

Continuous monitoring of 3rd-party vendors has become increasingly important - no surprise here. So, what should you do when a vendor’s security rating isn’t up to your risk management standards? What if they are showing inadequat... Keep Reading

Lawyers are a profession keenly aware of why privacy matters. Similar to yet distinct from doctor-patient privacy, attorney-client privilege acts as the foundation for the professional relationship. A law firm data security incide... Keep Reading

Age, height, weight, and blood pressure are all measurements we track routinely to monitor our health. Why? Because we want to be sure that as time passes, the measurements of our health are in a good place, or if they’re changing... Keep Reading

There’s an old saying that “knowledge is power.” As companies look to enhance their security posture, knowledge is one of the most potent weapons to thwart cybercriminals. No organization can erase risk, but any organization can w... Keep Reading

Benjamin Franklin once said, “in this world, nothing is certain except death and taxes.” However, if he were here today, he would likely add cybersecurity risk to that list. Regardless of cybersecurity program maturity or IT infra... Keep Reading