Resource Listing

Blog
A Shared Language to Improve Ecosystem Cybersecurity Risks
August 7, 2018
Security professionals need to find a way to bridge the knowledge and skills gap by creating a shared vocabulary that fosters cybersecurity improvements across an entire ecosystem of organizations.
More Details
Cyber Threat Intelligence
Learning Center
The Value of Communicating Risk Meaningfully Across the Business
June 20, 2022
While cybersecurity might be under the umbrella of IT, make no mistake: a breach will impact the entire business, making it the entire organization’s responsibility to be able to understand and take action on risk. Your organization needs to have a holistic view of risk that can enable technical and business conversations about cyber risk. By understanding not just the nuts and bolts of an exploit, but the impact it can have on employees, customers, and revenue, security experts and business leaders alike can then prioritize actions, budgets, and initiatives.
More Details
Tech Center
Blog
SecurityScorecard’s Board Trends Report Provides Actionable Insight
March 31, 2021
An effective cybersecurity report needs to be quantifiable and should frame the risks as they pertain to the business’s goals, strategies, and risk tolerance.
More Details
Security Ratings, Supply Chain Cyber Risk
Blog
Decoding the Boardroom: A Fortune 500 CISO’s Guide to Winning Hearts and Budgets
November 20, 2023
It’s imperative for CISOs to learn how to speak the language of their boards and stakeholders, oh by the way…it’s not cyber risk probability! Board members and business stakeholders prefer economic terminology over tech talk.
More Details
Executive Viewpoint, Security Ratings
Blog
‘The Perfect Scorecard’ Focuses on Communication Between CISOs and the Board
August 19, 2021
The Perfect Scorecard: Getting an ‘A’ in Cybersecurity from your Board of Directors, is an attempt to close that gap. The Perfect Scorecard features insights from 17 leading CISOs and executives known for their leadership skills and their ability to communicate across roles and sectors.
More Details
Security Ratings
Learning Center
How to Justify Your Cybersecurity Budget
September 14, 2020
Organizations know they need cybersecurity, but security leaders still struggle to get the funding necessary. CISOs looking to justify their cybersecurity budgets need ways to prove return on investment, provide metrics for measuring success, and ensure continued year-over-year value.
More Details
Tech Center
Blog
Calculating the ROI of Security Ratings.
August 24, 2020
It can be difficult to show leadership metrics that prove that you’re saving money because of incidents that haven’t happened. Fortunately, there are a number of qualitative ways to prove to your board and investors that your investment in security ratings is saving your paying off.
More Details
Security Ratings
Learning Center
6 Cybersecurity Metrics Every CISO Should Monitor
December 7, 2020
By tracking the right metrics, Chief Information Security Officers (CISOs) can monitor the effectiveness of their processes and controls overtime, evaluate team performance, and show return on investment (ROI) of security spending at the board level. Here is a list of metrics that can help CISOs prioritize and maximize their efforts, and conduct more effective security reporting at the board level, so they can drive value and growth within their organizations.
More Details
Security Ratings, Tech Center
Research
Ransomware Attack on Vendor Managing U.S. Government Records
More Details
Public Sector
Research
BlackCat Ransomware Group Claims Attack on Healthcare Service Provider
More Details
Cyber Threat Intelligence
Research
Avoslocker Ransomware Group Targets U.S University
The Avoslocker ransomware group recently claimed responsibility for an attack against a small U.S. university.
More Details
Attack Surface Management, Cyber Insurance, Cyber Threat Intelligence, Public Sector
Research
Investigation of North Korea-Linked Indicators of Compromise (IOCs)
More Details
Cyber Threat Intelligence