Risk management provider now ranks organizations against each other

IT security is a moving target: Just when you think you have all the holes covered, a new one pops up. Then security pros cover that one.

But how is the organization performing over time and against its peers?

A Massachusetts risk management company has a new service it says can answer that question. BitSight Technologies, which sells a cloud-based IT security ratings service allowing organizations to rate suppliers who connect to their networks, now offers a benchmark scoring service.

The idea, says co-founder and chief technology officer Stephen Boyer, is that CSOs and CIOs can see how they are doing against any company they want to be measured against.

Formed in 2011, BitSight pulls in malicious Internet traffic daily from around the world flowing out from organizations – data being sent by botnets and other malware to command and control servers. Data is classified by type (spam, DDoS, unsolicited communications).

In short, it ranks organizations by external measurement.

It has petabytes of data stored — some of it as far back as three years on organizations with poor IT security. The data can show how much has been flowing out of an organization, for how long, and how long it took for detection and remediation.

The resulting report helps guide management and boards of directors in deciding how IT security is performing.

The original Security Ratings service looked at an organization’s partners and suppliers and aimed at security pros, risk managers and insurers. Boyer said he has Canadian financial services and telcos as customers.

Security Ratings for Benchmarking compares an organization against its peers, or, against any other company the customer wants. A retailer for example, may want to benchmark not merely against the best in the industry but against the financial services industry.

Boyer didn’t detail pricing of the benchmarking service, which includes comparison with five organizations, except to say it is on an annual subscription basis. More than five companies costs extra.

Subscribers to the benchmark service can log into a dashboard to see ongoing results. There are also regular reports includes details on the subscriber’s own organization, such as events, ports and IP addresses, so issues can be addressed (these details aren’t available for third parties). The reports can be exported to a PDF.

BitSight sells either direct or through consulting partners. In Canada that partner is Accuvant Inc., a Denver-based firm with an office in Mississauga, Ont.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

Howard Solomon
Howard Solomon
Currently a freelance writer, I'm the former editor of ITWorldCanada.com and Computing Canada. An IT journalist since 1997, I've written for several of ITWC's sister publications including ITBusiness.ca and Computer Dealer News. Before that I was a staff reporter at the Calgary Herald and the Brampton (Ont.) Daily Times. I can be reached at hsolomon [@] soloreporter.com

Related Tech News

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Featured Reads