A recent study by BitSight Technologies of nearly 10,000 organizations in six major industries stated that the energy and utilities sector showed greater vulnerability to cyberattacks than other industries or the federal government. BitSight uses external data about an organization’s network to assess risk and produces ratings of risk that are similar to credit report ratings, on a scale of 250 to 900. Data that is collected from outside the organization includes communications with botnets, malware distribution, e-mail server configuration and user behavior.