Companies are using a range of metrics, scoring systems, and reputational rankings to measure and improve their cybersecurity. Despite this, many of these tools only successfully measure risk. Experts argue companies should only use these systems if they help to achieve end goals rather than optimizing scores. Cyber insurers have gained significant value from these systems since they can identify potential risks, whereas software security communities and others have moved towards the more reliable checklist system. Hence, it’s essential to use the right data to reach productive conclusions.

Rest, AustralianSuper Among Funds Hit By Cyberattack
Australia’s largest superannuation funds, including AustralianSuper, REST, Australian Retirement Trust, and Hostplus, have suffered from a coordinated cyber attack, with around 8,000 accounts breached. Hackers