Companies are using a range of metrics, scoring systems, and reputational rankings to measure and improve their cybersecurity. Despite this, many of these tools only successfully measure risk. Experts argue companies should only use these systems if they help to achieve end goals rather than optimizing scores. Cyber insurers have gained significant value from these systems since they can identify potential risks, whereas software security communities and others have moved towards the more reliable checklist system. Hence, it’s essential to use the right data to reach productive conclusions.

‘Systematic non-compliance’: NSW Health at potential risk of cyber security threats, audit finds – cybersecurityconnect.com.au
‘Systematic non-compliance’: NSW Health at potential risk of cyber security threats, audit finds cybersecurityconnect.com.au

