Forest Global Training Partners

Cyber Risks · Krebs on Security

Scanning for Flaws, Scoring for Security

Summary: FICO launched a Cyber Risk Score that estimates an organization's chance of a data breach in the next 12 months from its public-facing online assets, and in October teamed with the U.S. Chamber of Commerce to score more than 2,500 U.S. companies, giving U.S. businesses an overall score of 687 on a 300-850 scale. A FICO marketing email advertising a benchmarking feature accidentally exposed ExxonMobil's score of 587, which falls in the "elevated" risk category and below the 637 mean for large Energy and Utilities companies.

What you should know: Scores derived from outside scanning are being positioned for cyber insurance pricing and supply chain vendor evaluation, yet the same article documents Equifax failing to patch a web server and then missing an intrusion for months while intruders made more than 9,000 queries on 48 databases over 76 days - and later leaving expired certificates on its credit freeze portal for two weeks.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related