CORL Technologies has launched a toolkit to test medical device safety against medical device and IoT risks.
CORL is committed to driving and delivering measurable risks presented by third-party vendors, including manufacturers of medical equipment. To that end, the organization has launched a new Device Risk Assessment Tool Kit that incorporates CORL self-awareness to work with the country’s leading health systems, standards organizations, and medical device manufacturers.
The CORL medical device risk assessment toolkit includes a list of risk assessment questions that use CORL risk intelligence data to perform thousands of medical device safety assessments. The new diagnostic toolkit examines medical equipment manufacturers and specific products, equipment, and performance models of health care organizations.
“The CORL medical device risk assessment tool kit is extremely valuable to our organization,” said Monique Hart, Executive Director, Information Security at Piedmont Healthcare. “The industry needs new models to reduce the risk of cybersecurity introduced by medical devices. CORL’s ability to harness the power of big data and specialized expertise in medical device security has greatly enhanced our diagnostic and therapeutic processes to protect the safety of our patients and the organization. ”
CORL medical device testing model and technology integrates device testing and product across security areas including disaster risk management and control, network and services, physical security, authentication, and life cycle controls for secure development.
Tag: Risk Assessment
Action1 Partnered With Brigantia To Provide Real-Time Visibility And Security Risk Mitigation
Action1 Corporation, the provider of the simple and secure remote monitoring and management (RMM) cloud platform has announced a partnership with Brigantia. Through enhanced remote IT administration, the alliance will enable local managed service providers (MSPs) to improve their business performance by assuring secure and efficient operations for their clients.
Brigantia is a managed services channel distributor that offers a full suite of cybersecurity solutions, as well as secure, enterprise-class data communications and cloud services. Brigantia is based in Ripon, North Yorkshire, and works with hundreds of channel partners throughout the United Kingdom and Ireland. Brigantia can now address local MSP demand for a modern, secure, and easy-to-use cloud RMM solution with the addition of Action1 RMM to its portfolio.
“Brigantia take great pride in helping next-generation vendors break into the UK and Ireland MSP channel markets, and Action1 RMM is a true disruptor in what has been a rather stale RMM space,” said Angus Shaw, Sales Director at Brigantia. “This cloud-based platform enables MSPs to mitigate security risks for their clients, manage their endpoints, comply with security standards, and support users — from anywhere. It is an exciting addition to our portfolio in a space that is crying out for innovation, and we are looking forward to introducing Action1 RMM to our channel community throughout 2022 and beyond.”
“We are excited to expand our distribution footprint in the UK with such a strong market player as Brigantia,” said Alex Vovk, CEO and co-founder of Action1. “This partnership will help meet market demand for a modern cloud-based RMM solution that empowers IT service providers to effectively secure and support today’s hybrid workforces.”
Castellan’s The New Crisis Management Module Allows Holistic Resilience Management
Castellan Solutions, a leading firm providing resilience management solutions, announced the launch of its new Crisis Management module, which enables companies to act quickly and effectively in the crucial times following the onset of a business disruption.
The risk landscape has evolved, and business as usual is being called into question on a daily basis. As supply chain disruptions continue and cyber attacks grow in magnitude and frequency, the question is no longer whether disruption will occur, but when.
Organizations can integrate better and optimise readiness activities (operational resilience, disaster recovery, business continuity, and compliance planning) and response activities (crisis/incident management and emergency notification) to reduce the impact of business disruptions affecting their people, consumers, reputation, and revenue by taking a holistic approach to risk management through resilience management.
Castellan’s SaaS platform provides a fully integrated solutions can help users to analyse and prioritise risk, develop actionable response and recovery plans, interact with colleagues through multiple channels, stress test plans using possible scenarios, and rapidly mobilise response teams in the critical moments of an incident occurring – all from a single platform.
The Crisis Management module fully integrates with Castellan’s multi-modal emergency notification capability, allowing organisations to communicate and manage an incident with confidence through:
Task Management: Activate plans and drive accountability with interactive task management and tracking, with an ability to assign ad hoc tasks based on the unique nature of the incident.
Encrypted Chat: Collaborate securely across teams with encrypted chat inside each incident, even if normal channels are compromised.
Mobile Functionality: Drive all response coordination, from incident creation to task management, straight from your mobile device.
Executive Dashboards: Provide real-time updates on the situation and the overall response.
“To confidently achieve the right level of resilience, organizations must work to close high priority vulnerabilities and build a world-class response capability “The innovation and expansion of our SaaS platform paired with our consulting and managed services enables our clients and partners to manage their response to multiple, simultaneous threats with ease,” said Jon Ezrine, CEO of Castellan Solutions.
BitSight and Marsh McLennan Joined forces to Strengthen Organizations’ Cybersecurity Performance
BitSight, the security ratings company and Marsh McLennan, the world’s leading professional services company in the categories of risk, strategy, and people, signed a collaboration to help businesses better understand, evaluate, and manage their cyber risks.
The recently launched Marsh McLennan Cyber Risk Analytics Center will use BitSight Security Ratings, data, and analytics to help customers better understand their cybersecurity performance by making more educated risk management decisions. Clients who have access to BitSight may obtain this information quickly, detect potential risks, and implement mitigation techniques. The two companies will also work on joint research and analysis, combining their widely renowned perspectives.
The importance of cybersecurity performance management cannot be overestimated, given the worrying rise in cybersecurity incidents. BitSight Security Ratings are the most extensively used and recognized cyber risk ratings in the market and the only solution that has been independently validated to correlate with data breach risk.
“2021 is shaping up to be one of the most challenging years for cyber risk on record, and we continue to hear from clients that cybersecurity is among their most urgent risk concerns. By collaborating with BitSight, we are providing clients with more data-driven insights to better manage risk in an increasingly difficult cybersecurity landscape,” said Scott Stransky, Head of the Marsh McLennan Cyber Risk Analytics Center.
“Cyber insurance brokers now play a critical role in helping their clients actively manage cyber risk. This marks an exciting opportunity to share our cyber risk data and expertise to help Marsh McLennan counsel their clients on reducing risk of cyber exposure. This collaboration builds on BitSight’s previous work to bring universal understanding to cyber risk, and further validates BitSight’s position as the trusted industry standard in cybersecurity ratings and analytics,” said Stephanie Snyder Frenier, vice president and general manager, insurance at BitSight.
Moody’s partner BitSight with an investment of $250 million to create integrated cybersecurity risk platform
Moody’s Corporation and BitSight announced a significant investment by Moody’s, further enhancing BitSight’s offerings and capabilities, to create a comprehensive, integrated, industry-leading cybersecurity risk platform. Moody’s will invest $250 million in BitSight. This transaction reflects the increasing strategic, financial, and operational impact of cyber risk to organizations and markets.
BitSight, a leader in cybersecurity ratings, and BitSight will acquire VisibleRisk, a cyber risk ratings joint venture founded by Moody’s and Team8, a worldwide venture organization, as part of the announced transaction.
BitSight helps global market participants understand cyber risk through ratings, analytics, and performance management tools, delivering unique insights for over 2,300 global customers, including many Fortune 500 companies, government agencies, insurers, and asset managers. Moody’s will leverage BitSight’s extensive cyber risk data and research across its growing suite of integrated risk assessment product offerings. BitSight’s acquisition of VisibleRisk adds a unique in-depth cyber risk assessment capability and advances its ability to analyze and calculate an organization’s financial exposure to cyber risk. BitSight is valued at $2.4 billion in this deal, indicating the company’s leadership in a growing data and analytics sector.
“As organizations invest in cyber defense and resilience, another critical need has emerged: the ability to accurately measure and quantify cyber risk and exposure. Creating transparency and enabling trust is at the core of Moody’s mission – to help organizations assess complex, interconnected risks and make more informed decisions. BitSight is the leader in the cybersecurity ratings space, and together we will help market participants across disciplines better understand, measure, and manage their cyber risks and translate that to the risk of financial loss,” said Rob Fauber, President and Chief Executive Officer of Moody’s.
“Cybersecurity is one of the biggest threats to global commerce in the 21st century. Our partnership with Moody’s and acquisition of VisibleRisk expands our reach to help customers manage cyber risk in an increasingly digital world,” said Steve Harvey, President and Chief Executive Officer of BitSight.
SecurityScorecard forms Partnership with Tenable to Deliver Complete Cyber Risk Monitoring
SecurityScorecard, the leading security ratings firm, formed a partnership with Tenable, the Cyber Exposure company, to provide a holistic view of a company’s risk posture by combining Tenable’s visibility and depth of analytics into enterprise networks with SecurityScorecard’s external cyber monitoring. CISOs, IT directors, and security teams can now examine their SecurityScorecard rating, evaluate their external cybersecurity health, and analyze their risk posture from within the Tenable Lumin dashboard as a result of this partnership.
“Understanding your up-to-date risk posture has become a necessity in a world that’s increasingly more complex, dynamic and transient. We’re excited to partner with SecurityScorecard to give customers complete visibility into the risks that exist inside and outside their environment, and guidance for how to most effectively reduce that risk, all in a single platform,” said Ray Komar, vice president of technical alliances, Tenable.
Cybersecurity testing processes that are performed on a one-time or periodic basis have become obsolete. Today’s cyber threats vary by the minute, so businesses need a solution that can keep up with the fast-paced nature of cybersecurity by continuously monitoring for vulnerabilities and assessing the security posture and cyber resilience of the entire organization.
“Organizations must be proactive to address cyber breaches, and security ratings are the foundation to measuring and understanding security resilience in real time. “Together, SecurityScorecard and Tenable are advancing a new standard for continuous monitoring by blending external and internal risk assessments, which provide organizations with a holistic view into the risks that exist in their environments,” says Aleksandr Yampolskiy, CEO and co-founder of SecurityScorecard.
Tenable Lumin’s strong analytical capabilities for risk assessment are combined with SecurityScorecard’s real-time visibility of external vulnerabilities in this integration. Clients of Tenable Lumin may now use real-time updates to construct external risk management and threat detection playbooks, enabling them to properly identify and respond to threats and risks.
Black Kite Introduced Aviator Partner Program to Expand Deployment Cyber Risk Ratings Solutions
Black Kite launched the Black Kite Aviator partner program. Black kite is a recognized cyber risk ratings firm. Aviator allows IT solutions providers to expand their cyber risk services portfolio and assist clients in securing their supply chains. The Aviator program has reached an agreement with more than 50 companies.
Members of the Aviator partnership program will have rights to use Black Kite’s industry-leading platform, which streamlines third-party risk management, uses open-source intelligence and non-intrusive scans, provides automated and continuous monitoring, and measures third-party technical, financial, and compliance risk. Members of the program will also have access to Black Kite’s partner site, which has a repository of sales and marketing materials, a formal deal registration procedure, and other enablement tools.
“Every organization needs third-party risk visibility and a means of determining the financial, brand, and reputational costs,” said Paul Paget, CEO of Black Kite. “The Aviator partner program will make Black Kite’s unique cyber risk and ransomware rating tools available to companies in the healthcare, financial services, manufacturing, and automotive verticals.”
The Ransomware Susceptibility IndexTM (RSITM), the OpenFairTM Tool, and a scalable that system reduce vendor evaluation times from weeks to hours are among the cyber risk solutions offered by Black Kite.
The RSI is a tool that calculates incident susceptibility and detects ransomware-prone companies. The OpenFair System is the first automated risk-assessment software for C-suite executives that calculates the financial implications of cyber breaches in quantified, convenient commercial terms. The Black Kite software continuously monitors for modifications across 20 cybersecurity categories, keeping vendor risk evaluations up to date.
NetSPI’s Penetration Testing and Vulnerability Management Platform now includes risk scoring
NetSPI, the industry leader in organizational penetration testing and attack surface management, has added risk scoring to its ResolveTM vulnerability management and penetration testing platform. NetSPI’s risk score intelligence in combination with Penetration Testing as a Service (PTaaS) assists clients in prioritizing, managing and remediating the vulnerabilities that pose the highest risk to their firm.
NetSPI’s new risk scoring features dynamical integration into PTaaS to deliver both a detailed vulnerability risk score and an aggregate risk score for a firm’s projects, assets, apps, and networks. NetSPI customers who use its penetration testing services have access to risk scoring. NetSPI clients can safely dedicate funds and resources to the most critical vulnerabilities by using risk rating.
The risk scores are used as a quantitative assessment for risk reduction over time, validation of cybersecurity expenditures, resource allocation, and benchmarking in the industry. With NetSPI’s risk score, organizations can appropriately prioritize vulnerability patching by taking into account business context and the threat landscape.
“There are varying approaches to assigning vulnerability severity, but risk today extends far beyond individual vulnerabilities. The key is to recognize the risks most likely to disrupt the business, identify the threats that would increase those risks, and prioritize the most appropriate mitigations to protect your organization from those threats. NetSPI’s risk scoring does just that,” said Jake Reynolds, Head of Product at NetSPI.
“Reactive cybersecurity is a thing of the past. Security leaders must get proactive and take a risk-based approach to stay ahead of today’s adversaries. Our risk scores enable NetSPI clients to make proactive security decisions based on their unique risk factors. In other words, it allows them to confidently allocate budget and resources to the vulnerabilities that matter most,” said NetSPI President and CEO Aaron Shilts.
XYPRO and Hewlett Packard Enterprise are expanding their partnership to offer a full suite of security solutions on HPE NonStop systems
XYPRO Technology Corporation (XYPRO), a global leading organization in cybersecurity, identity management, analytics and secure database management software, announced the expansion of a decades-long cooperation with Hewlett Packard Enterprise (HPE) to deploy its whole package via HPE NonStop systems. HPE NonStop systems, which are designed for mission-critical situations that require 100 percent fault tolerance, now include extended XYPRO solutions for improved threat detection and security management capabilities.
This expansion is in line with XYPRO’s growth plan and broadens the availability of mission-critical database management, security, and integration solutions into new sectors throughout HPE’s customer base. XYPRO’s flagship product, XYGATE SecurityOne, a patented security, compliance, and threat detection platform, and XYGATE Identity Connector, the first and only Sailpoint and CyberArk integrations for HPE NonStop systems, are among the solutions that help customers protect their mission-critical environment. Customers can now use HPE NonStop systems to meet criteria for securing and monitoring mission-critical investments.
HPE offers the whole XYPRO cybersecurity product family, including XYGATE SecurityOne (XS1) and Integrations.
“In our history of delivering risk management solutions for HPE NonStop systems customers longer than anyone has, we strive for meaningful and strategic business relationships while providing great support and leading edge security solutions. Our strong relationship with HPE is why several XYPRO solutions have shipped with the HPE NonStop operating system for more than a decade,” said Lisa Partridge, CEO, XYPRO. “Making the rest of the XYPRO’s solution suite available through HPE further strengthens security within the HPE NonStop system ecosystem, providing customers security and consistency at significant value.”
“Ensuring reliable cybersecurity and management capabilities is critical for customers running always-on, 100% fault-tolerant environments with sensitive data exchange,” said Jeff Kyle, vice president and general manager, Mission Critical Solutions, HPE. “By building on our long-standing partnership with XYPRO to expand security capabilities with new analytics and automation features on our HPE NonStop systems, we are furthering our ability to deliver trusted platforms for mission-critical needs that are easy to manage while meeting strict data governance requirements.”
