Margaret Hopkins, senior vice president and chief information officer for Puget Sound Energy, noted that her company uses BitSight Security Ratings, a rating system similar to a credit score that helps organizations identify, quantify and mitigate cyber risk. If a third-party vendor has an unsatisfactory score, they can use BitSight’s consulting services and develop a plan for improving their practices, which they can then bring back to Puget Sound.