BitSight Security Ratings for Mergers and Acquisitions

Companies have insight into financial, legal and other risks during the due diligence process, but are oftentimes left in the dark when it comes to cyber risks. A survey conducted by law firm Freshfields Bruckhaus Deringer found that 90% of people believed that cyber breaches could reduce the value of a potential acquisition.

While questionnaires and penetration tests can provide one level of insight into security practices, these methods are time consuming and reflect only a “snapshot in time” view. Without a quantified baseline, continuous measurement, and comparative data, companies are limited in their ability to measure the impact of risk mitigation efforts at potential acquisitions. In order to proactively identify and mitigate risk, companies need automated tools that continuously and objectively measure and monitor the security of potential acquisitions and current investments.

BitSight Security Ratings for Mergers and Acquisitions deliver timely, data-driven analyses of a company’s cybersecurity performance all from the outside. These ratings are generated on a daily basis, giving continuous visibility into the security of important assets.

With the ability to drill down into the security details used to generate an organization’s rating, information security teams can identify and communicate the most critical security issues. Historical data also gives companies the ability to track progress of security mitigation techniques over time and measure improvements in the incident response process. BitSight customers have used these ratings to encourage investment companies to buy cyber insurance or conduct penetration testing.