Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Threat Intelligence

10/3/2018
11:55 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Lockpath and BitSight Announce Partnership to Strengthen Cyber Security Risk Programs

The new integration focuses on managing security risk from third and fourth parties.

OVERLAND PARK, Kan., Oct. 3, 2018 /PRNewswire/ -- Lockpath, a leading provider
of integrated risk management solutions today announced an integration of its
award-winning Keylight Platform with the BitSight Security Rating Platform.
Through this partnership and product integration, organizations now have the
ability to better address the growing number of cyber security risks posed by
third- and fourth-parties.

The integration of BitSight Security Ratings and Keylight, Lockpath's integrated
risk management platform, gives joint customers the ability to quickly identify
security risks posed by vendors, suppliers, and other third parties. The use of
BitSight's continuous monitoring capabilities combined with Keylight's dynamic
alerting and workflow tools provides joint customers with a more accurate and
actionable view into their third-party risk management programs.

Rick Hedeman, Director of Strategic Partnerships at BitSight, said, "The
BitSight and Keylight integration gives our customers actionable insight into
the cyber-security posture of their third and fourth parties, enabling them to
identify, understand, and act on threats facing their supplier ecosystem.
BitSight Security Ratings combined with Keylight's workflow and alerting
capabilities enables customers to design and run a comprehensive integrated risk
management program, strengthening their company's overall security posture."

Additionally, the integration will enhance internally-produced data in Keylight
with BitSight's objective, real-time data on the cyber security performance of
suppliers, based on externally observable, non-intrusive data and methods. This
enriched data set provides a more holistic picture of the security risks posed
by the third party, as well as additional context as to how these risks can
affect the business. Companies can use this information to determine the
frequency and depth of risk assessment needed and better prioritize remediation
efforts.

"This integration with BitSight will provide our customers with a more advanced
solution for managing third-party security risk," said Chris Caldwell, Lockpath
Chief Executive Officer and Founder. "The combination of Keylight's management
capabilities and analytics with BitSight's security ratings gives our customers
a more efficient and effective approach to third-party risk management."

Lockpath's award-winning Keylight Platform integrates the full vendor lifecycle
into daily processes and includes capabilities for information gathering, due
diligence investigation, risk assessments, contract negotiation, ongoing
monitoring, and termination workflows. By centralizing all this information in
one user-friendly solution with advanced reporting capabilities, Keylight allows
organizations to better manage vendor risk and to reduce the risk of
non-compliance.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Navigating Security in the Cloud
Diya Jolly, Chief Product Officer, Okta,  12/4/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-19551
PUBLISHED: 2019-12-06
In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the User Management screen of the Administrator web site. An attacker with access to the User Control Panel application can submit malicious values in some of the time/date formatting and time-zone fields. These fields are not b...
CVE-2019-19552
PUBLISHED: 2019-12-06
In userman 13.0.76.43 through 15.0.20 in Sangoma FreePBX, XSS exists in the user management screen of the Administrator web site, i.e., the/admin/config.php?display=userman URI. An attacker with sufficient privileges can edit the Display Name of a user and embed malicious XSS code. When another user...
CVE-2019-19620
PUBLISHED: 2019-12-06
In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local user can bypass the generation of telemetry alerts by removing NT AUTHORITY\SYSTEM permissions from a malicious file.
CVE-2019-19625
PUBLISHED: 2019-12-06
SROS 2 0.8.1 (which provides the tools that generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2) leaks node information due to a leaky default configuration as indicated in the policy/defaults/dds/governance.xml document.
CVE-2019-19627
PUBLISHED: 2019-12-06
SROS 2 0.8.1 (after CVE-2019-19625 is mitigated) leaks ROS 2 node-related information regardless of the rtps_protection_kind configuration. (SROS2 provides the tools to generate and distribute keys for Robot Operating System 2 and uses the underlying security plugins of DDS from ROS 2.)