- March 6, 2023: Added Academic Paper (PDF).
- October 25, 2022: Published.
Marsh McLennan, the world’s largest insurance broker, conducted an independent analysis to quantify the relationship between the Bitsight Security Rating and 13 risk vectors with cybersecurity incident data from Marsh McLennan. The study compared the security performance data of 365,000 organizations that experienced cybersecurity incidents against those that did not.
Bitsight data was identified to be correlated with cybersecurity incidents. Poor performance in these areas increases the risk of experiencing a cybersecurity incident, while strong performance implies a lower risk of incident.
Security, business, and insurance leaders are encouraged to integrate these findings into their cybersecurity decision-making processes. Market participants should pay particularly close attention to key findings in these areas when forming a strategy to avoid cybersecurity incidents.
Documents
- Full study and recommendations: Bitsight Blog: “New Study Finds Significant Correlation Between Bitsight Analytics and Cybersecurity Incidents”
- Academic Paper