Resources
Cybersecurity white papers, data sheets, webinars, videos and more
Resource Library
![Insights from the front lines: How to evaluate a partner you can trust [#1]](https://securityscorecard.com/wp-content/themes/securityscorecard/resources/images/resource-feature-image.webp)
Webinars
Insights from the front lines: How to evaluate a partner you can trust [#1]
Learn more in this resource.
Webinars
Threat Talk Thursday E04
Learn more in this resource.
Research
Attack Surface Intelligence Identifies Additional Cuba Ransomware-Linked Indicators of Compromise
Executive Summary Following the publication of a report regarding the Cuba ransomware group’s recent activities, the SecurityScorecard Threat Research, Intelligence, Knowledge, and Engagement (STRIKE) Team leveraged SecurityScorecard’s unique data to enrich the indicators of compromise (IoCs) linked to this activity. STRIKE Team researchers identified additional IoCs not explicitly linked… Read More
Blog
Qualitative vs. Quantitative Cybersecurity Risk Assessment: What’s the Difference?
Formulating a cybersecurity risk assessment methodology is an essential part of building a robust information security program to identify key information assets and their value to the organization. By using this data, it is then possible for management to determine whether their existing security measures are adequate and investigate its risk profile.\r\n\r\nThere are two primary risk assessment methodologies: qualitative and quantitative risk assessments. But to build an effective IT security risk assessment methodology, you will need to incorporate both quantitative and qualitative approaches to paint an accurate picture of risk. Let’s take a closer look.
Tech Center
Case Studies
Private Equity Firm
Private Equity Firm focused on the partner aspect of cybersecurity services.
Blog
What is the Cost of Cyber Liability Insurance?
The cost of cyber liability insurance can vary based on factors such as business size, industry, risk profile, and coverage needs.
Cyber Insurance
Executive Viewpoint
Tech Center
Blog
What is the Cost of Cyber Liability Insurance?
The cost of cyber liability insurance can vary based on factors such as business size, industry, risk profile, and coverage needs.
Cyber Insurance
Executive Viewpoint
Tech Center
Webinars
DORA Compliance Unveiled: Managing Third-Party Risks
Learn more in this resource.
Webinars
Customer Insights Webinar: Level Up Your Threat Intelligence Program
Learn more in this resource.
Research
A Detailed Analysis of the Money Message Ransomware
Learn more in this resource.
Webinars
Navigating the Road to SEC Cyber Incident Disclosure Compliance
Learn more in this resource.
Press
SecurityScorecard Joins Forces with Measured Analytics and Insurance to Deliver Industry-First Cyber Insurance Discounts for Top Security Ratings
SecurityScorecard partners with Measured Analytics and Insurance to deliver the first cyber insurance premium incentive for Security Ratings.
Cyber Insurance
Press
SecurityScorecard Joins Forces with Measured Analytics and Insurance to Deliver Industry-First Cyber Insurance Discounts for Top Security Ratings
SecurityScorecard partners with Measured Analytics and Insurance to deliver the first cyber insurance premium incentive for Security Ratings.
Cyber Insurance
Blog
Using a Standardized Approach for Measuring Cybersecurity in Government
One of the highlights of last week’s annual Billington CyberSecurity Summit was a fireside chat on Friday with Anne Neuberger, deputy national security adviser for cyber and emerging technology. In her talk, Neuberger stressed the importance of not only keeping our critical infrastructure secure but harnessing an accurate and repeatable way of measuring it to ensure progress.
Public Sector
Ebook
5 Steps You Can Take To Boost Your Boards Involvement And Stay Compliant
PoshC2 is an open-source C2 framework used by penetration testers and threat actors. It can\r\ngenerate a Powershell-based implant, a C#.NET implant that we analyze in this paper, and a\r\nPython3 implant. The malware retrieves the current Windows user, the network domain name\r\nassociated with the current user, the computer name, the processor architecture, the current\r\nprocess name and id, and the path of the Windows directory. The network communication is\r\nencrypted using the AES algorithm with a hard-coded key that can be changed by the C2\r\nserver. The C# implant can load and execute modules in memory without touching the disk by\r\nusing multiple commands. It can perform post-exploitation activities by loading tools such as\r\nSharpHound, Rubeus, SharpView, and Seatbelt.
Blog
The Top 7 Cyberattacks on U.S. Government: A closer look at the evolving landscape of cybersecurity
Cyberattacks are an increasingly significant threat to governments worldwide. This blog post examines some of the top cyberattacks on US government.
Public Sector
Tech Center
Data Sheet
Top 10 Security Questions Asked By Board Members
What are the top questions board members ask of their organizations security? We’ve compiled 10 common questions with strategies to address their concerns.
Executive Viewpoint
Webinars
Customer Insights Webinar: Take More Control of Your Score with Custom Scorecard
Learn more in this resource.
Ebook
DORA: A Journey To Cyber Resilience
In January 2023, a pivotal regulation took center stage for the European Union (EU) financial services sector. The Digital Operational Resilience Act (DORA) emerged as a requirement, ushering in a new era of cybersecurity.
DORA
Webinars
Threat Talk Thursday E03
Learn more in this resource.
Data Sheet
Fast, Easy, Collaborative Refute Process
Adjust your ratings with a fast, easy, and collaborative refute process
Security Ratings