Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Risk Management

Insider Risk Management Fundamentals: 10 Best Security Practices for Implementation

Insider-driven security incidents are increasing in frequency. According to the 2022 Cost of Insider Threats Global Report by the Ponemon Institute, 67% of companies experienced between 21 and 40 incidents in 2022, which is 7% more than in 2020. Insiders with authorized access can fall victim to hackers’ attacks due to negligence or can deliberately compromise and severely damage the organization’s data and systems.

Cybersecurity Readiness (Definition and 4 Evaluation Steps)

Cybersecurity readiness is the ability to identify, prevent, and respond to cyber threats. Yet despite the daily headlines and warnings, organizations struggle to achieve cybersecurity readiness. Just look at the statistics: 78% of senior IT and security leaders lack confidence in their company’s security posture. And, despite increased investments in cybersecurity controls, nearly 80% believe their organization lacks sufficient cybersecurity protections.

Exploring the Monetary Authority of Singapore's TPRM Guidelines

The Monetary Authority of Singapore (MAS) is Singapore's central bank and financial regulatory authority. Along with regulating monetary policies, banking, and currency issuance, MAS sets standards for financial institutions' operational practices. MAS’ third-party risk management guidelines provide structure for financial institutions to ensure resilience against third-party outsourcing arrangements risks, including supply chain vulnerabilities and information security.

Consolidating risk visibility with Software Risk Manager | Synopsys

Organizations use many AST tools to test software, across all stages of development, for different types of issues. However, these tools are often siloed, and security teams don’t have a way of summarizing the data they generate to understand what to prioritize, test, and fix. This has driven the evolution of Application Security Posture Management (ASPM) solutions which consolidate findings and centrally manage testing, security workflows, and risk visibility across all applications.

Top tips: Zero-day vulnerabilities in mobile apps-top 5 risks and mitigation strategies

Top tips is a weekly column where we highlight what’s trending in the tech world and list ways to explore these trends. This week we’re identifying the risks and vulnerabilities associated with mobile apps and discuss strategies to mitigate them. In our digitally connected world, mobile apps have become an integral part of our daily lives. We depend on them for communication, productivity, entertainment, and much more.

The Anatomy of a Breach

SecurityScorecard’s recent report with the Cyentia Institute found that 98% or organizations have a relationship with at least one third party that has experienced a breach within the last two years. This indicates that nearly every organization is at least indirectly exposed to risk through circumstances outside its control. With that in mind, it’s important for organizations to know how breaches can happen, how to detect them, and how they can respond effectively. Let’s explore.

How SBOMs and The Digital Supply Chain Converge

Software development is not slowing down and neither are the demands for new features. In order to keep up with the needs of the market and tight deadlines, software engineers have become adept at leveraging the massive ecosystem of 3rd party libraries available in source code management repositories such as GitHub. After all, why build something yourself and waste precious time when you can use what someone else has already created?.

Reinvent the way you partner with your supply chain to fix and mitigate security issues

It’s that time of the year again, 2024 planning. Security and third-party risk management leaders are scrambling to prioritize their initiatives for the coming year, advocate for more resources, and report on their progress over the past year. When only 16% of organizations report that they effectively manage third-party risk, the new year provides a blank slate to introduce new efficiencies to existing processes.

Rethinking Subjectivity Management for Cyber Insurance

Just like other insurance markets, subjectivities have become a staple of cyber insurance. When a cyber insurance underwriter issues a quote to the broker and insured, there may be additional requirements that must be met before the policy and coverage are activated. The management and resolution of these subjectivities creates friction for all stakeholders involved. It takes longer for insureds to obtain coverage, for underwriters to collect premiums, and for brokers to earn their commission.

Bitsight is a proud participant in the Microsoft Security Copilot Partner Private Preview

Bitsight today announced its participation in the Microsoft Security Copilot Partner Private Preview. Bitsight was selected based on their proven experience with Microsoft Security technologies, willingness to explore and provide feedback on cutting edge functionality, and close relationship with Microsoft.