The Forrester New Wave™: Cybersecurity Risk Rating Solutions
In Forrester’s evaluation of the emerging market for cybersecurity risk rating solutions, we identified the nine most significant providers in the category — Bitsight, Fico, iTrust, Normshield, Panorays, Prevalent, Riskrecon, SecurityScorecard, and upGuard — and evaluated them. This report details our findings about how well each vendor scored against 10 criteria and where they stand in relation to each other.
Cloud Risk Surface Report (1.54 MB)
This report (re)uses the same data set behind the Internet Risk Surface Report. It is derived from RiskRecon’s work in providing companies objective visibility into their third-party cybersecurity risk. For each organization analyzed, RiskRecon trains machine learning algorithms to discover internet facing systems, domains, and networks. For every asset discovered, RiskRecon analyzes the publicly accessible content, code, and configurations to assess system security and the inherent risk value of the system based on attributes such as observable data types collected and transaction capabilities. RiskRecon provided Cyentia a large anonymized sample of their production data set for this research.
Avoid Cyber Attacks and Save Money by Holding Less Data - 2019
In this white paper, learn more about why cybercriminals prioritize data hacking for financial gain, how your company can protect itself from a breach, and how data minimization practices can reduce the risks of cyber attacks and save you money.
Better Identity Coalition Policy Blueprint
The members of the Better Identity Coalition came together to create a set of consensus, cross-sector, technology agnostic policy recommendations for improving identity in America.
Executive Guide - Step-Up Your Password Resets with Identity Verification
A Comprehensive Guide to Managing Password Reset Risk with Identity Verification.
How to Strengthen Your Vendor Risk Management Strategy through Automation
As organizations grow, the number of vendors on which they rely increases to form a complex ecosystem. Many cyber attacks, however, are launched through third-party vendors.
Taking a Confident Approach Toward Managing Third-Party Risk
Building new digital relationships with third-parties increases exposure to a cybersecurity breach.
OneTrust accelerates vendor risk capabilities with CSA partnership
In December 2018, privacy management provider OneTrust announced a partnership with the Cloud Security Alliance (CSA) and the availability of free vendor risk assessment capabilities to all CSA members. In the era of the EU's General Data Protection Regulation (GDPR) and similar proliferating data protection regulations around the globe, the enterprise's capacity to evaluate its vendors and partners grows in importance.
Best Practices for Simplifying Vendor Onboarding
In this paper, we’ll reveal a practical alternative that helped our client move from 89 steps to three.
Pick the Right Path to Managing Third-Party Risk
Organizations are investing in digital technologies to drive business into the future. This also means they’re increasingly reliant on third-party vendors for outsourced services and solutions—expanding their attack surface and introducing more risk.
Third-Party Risk Management eBook
If your company employs third parties, then the responsibility falls to you and your employees to manage the risk they bring. But how do you go about designing and implementing your third-party risk management program for maximum effectiveness?
The Financial Executive's Guide to Extending Compliance Programs to Cloud Applications and More
Today’s access controls are usually enforced at the application level which means each access-control regimen is effectively “siloed” – one can’t “see” the other. It’s challenging enough to manage access within a single application. Managing that kind of access across all enterprise applications, across thousands of users, and across multiple business processes - the scale of complexity skyrockets. And adding to that complexity is that these applications may be on premise or in the cloud.
API Security Needs AI Now More Than Ever (Infographic)
API security is increasingly difficult for enterprise security teams to tackle. APIs are spreading fast and are a tempting target for cyberattacks. Learn about the challenges overwhelming security teams today that can be overcome with an intelligent API security solution.
IT Risk Assessment Checklist
Identify your risks to jump-start an A-class risk mitigation program.
