Bitsight Third-Party Risk Management vs. SecurityScorecard

If you have a large and complex digital supply chain, this kinds of solutions, and Bitsight in particular are a must. At the starting point gives you a great leverage using the already available info for major vendors, and allows you to focus were you have already identified gaps, or for those vendors that lack of information... and probably you should be focusing on

Incentivized

It was really easy to find issues, solve false positives and keep track of overall security ratings.

Incentivized

• Security hygiene tracking over time
• Understandable risk score based on observations
• Predictability model of potential cyber security issues based on security habits.

Incentivized

• Provides good reports
• Easy to manage and use
• Tracks in near real time customer changes on the public network

Incentivized

• Since data is based on public registration IP and domain data can be stale depending on ISP/Domain registration update delays.
• Correcting a false detection is a month-long endeavor and requires the company with the impacted score to clean up BitSight's data.
• Customer service for incorrect data is convoluted and requires a deep understanding of domain registration to correct the data. The responsibility for correcting data is placed solely on the customer's shoulders.

Incentivized

• Pricing could be reviewed for specific industries which were more impacted by the pandemic situation.

Incentivized

Great look and feel, intuitive in most modules, and has great features to gather the right info and process it at high speed. Good and usefull dashboards for our own, and has also proved to be very good when you are on the vendor side of the solution and need to send info to your customers

Incentivized

BitSight Security Ratings ranks evenly with SecurityScorecard and both below OneTrust for our use case. We needed a platform that would let us define risk for our organization and weight scores differently based on data sensitivity. BitSight and SecurityScorecard are aggregate data that can provide insight into the security habits of a potential vendor and should be considered as an addition to most vendor management projects. However, they both provide metrics based on hygiene and not on data-defined risk. In concert with a platform to evaluate risk based on data and to inform the overall evaluation of a vendor, BitSight Security Ratings can be made to shine. Just understand that you may have to validate some data.

Incentivized

n/a

Incentivized

• Wasted resource hours cleaning up data to correct erroneous risk score.
• Extra time spent addressing calls from clients about erroneous risk score data.
• Extra time validating risk score provided by BitSight Security Ratings for potential vendors to ensure valid data.

Incentivized

• ROI numbers as shown by the Forrester Research caused a positive impact on some of our prospects in Brazil.
• ROI numbers for using atlas - electronic questionnaire are just amazing. When customer does not need to worry about EXCEL traffic with its vendors asking for info - they feel a strong sense of relief.

Incentivized