Apr 26, 2018   SOURCE: PR NewsWire

New Independent Study Finds Adoption of Security Ratings on the Rise as CISOs Look to Increase Predictive Capabilities and Minimize Third-Party Risk

New Independent Study Finds Adoption of Security Ratings on the Rise as CISOs Look to Increase Predictive Capabilities and Minimize Third-Party Risk

91% of those using security ratings platforms find that the ROI meets or exceeds expectations

NEW YORK, April 26, 2018 /PRNewswire/ -- SecurityScorecard today released a new study entitled "Security Ratings Set The Standard" by Forrester Consulting(1) that surveyed 158 security leaders to evaluate how enterprises are assessing and managing security threats to their IT infrastructure, as well as to their third-parties. The survey found that while the threat landscape is growing more complex and dangerous, security ratings platforms are becoming a key component to address those threats while delivering a strong return on investment. The study was commissioned by SecurityScorecard.

Forrester predicts that in 2018, security decision makers will face new challenges primarily brought on by political tensions, constant connectivity, the ubiquity of data, and digital transformation efforts. A lack of ecosystem visibility, paired with evolving risks, makes
for huge operational security challenges.

Key Findings: 

    --  Security ratings adoption is on the rise: With 87% of respondents
        finding security ratings valuable (37%) or extremely valuable (50%).
        Twenty-nine percent of companies who do not currently use security
        ratings services are currently testing/piloting a tool or service, and
        another 41% plan to adopt them within the next two years.
    --  Return on Security Investment: 91% of respondents stated that their ROI
        has at least met expectations, with 55% saying that ROI has exceeded
        expectations.
    --  CISO's who are not using security ratings are missing out: Security and
        risk decision makers using security ratings benefit from improvements to
        threat intelligence, security posture, business resiliency, and ability
        to prioritize and justify new security investments, just to name a few.
        And many of the benefits that users have confirmed are greater than what
        nonusers of security ratings services would expect.
    --  Predictive capabilities and visibility into third-party risk are the
        most valued: Predictive and prescriptive capabilities are the most
        important criteria for survey respondents when considering an investment
        in a security ratings platform, followed by visibility into third-party
        risk, compliance tracking, and robust detail behind the scores.

"Security ratings have rapidly moved from a novel technology to a key component of an enterprise cybersecurity program," said Sam Kassoumeh, Co-Founder & COO, SecurityScorecard. "This study demonstrates the velocity at which the market is moving and the demand from security leaders to have visibility into the risks posed by their business partners and third party providers. Our triple-digit growth is directly related to our platforms ability to deliver predictive analytics, ecosystem-wide visibility, compliance capabilities and the most comprehensive data set in the industry."

To receive a free SecurityScorecard assessment and consultation for your business, visit instant.securityscorecard.com.

Methodology:
Findings from this study are based on an online survey Forrester conducted with 158 financial services, technology/software, manufacturing, healthcare, and/or retail enterprises in the United States to evaluate their cybersecurity tactics and adoption of security ratings services. Survey participants included director-level and above IT and operations decision makers with responsibility for security, risk, and compliance strategies. The study was conducted fully in March 2018.

About SecurityScorecard
Headquartered in the heart of New York City, SecurityScorecard's vision is to create a new language for measuring and communication security risk. The company was founded in late 2013 by Dr. Aleksandr Yampolskiy and Sam Kassoumeh, two former cybersecurity practitioners who had served, respectively, as Chief Information Security Officer and Head of Security and Compliance. With cloud solutions becoming an increasingly integral part of the security technology stack, Yampolskiy and Kassoumeh recognized the need to address third- and fourth-party risk as well as better understand the security capabilities of their business partners. Since its founding, the company has grown dramatically and now counts hundreds of leading brands as customers. SecurityScorecard is backed by leading venture capital investors including Sequoia Capital, GV, and Nokia Growth Partners among others. For more information, visit http://www.securityscorecard.com/.

(1) Security Ratings Set The Standard, an April 2018 commissioned study conducted by Forrester Consulting on behalf of SecurityScorecard

CONTACT: Danielle Ostrovsky, SecurityScorecard, Dostrovsky@SecurityScorecard.com, 410-302-9459

View original content with multimedia:http://www.prnewswire.com/news-releases/new-independent-study-finds-adoption-of-security-ratings-on-the-rise-as-cisos-look-to-increase-predictive-capabilities-and-minimize-third-party-risk-300636786.html

SOURCE SecurityScorecard