BitSight Technologies - Experts & Thought Leaders
Latest BitSight Technologies news & announcements
ODVA celebrated its 30th anniversary at its 23rd Annual Meeting of Members in Clearwater, Florida, USA on March 20, 2025. Since ODVA’s founding in 1995, the core Common Industrial Protocol (CIP) technology has evolved significantly and serves as the backbone of the pioneering EtherNet/IP automation network. The Annual Meeting was attended by over 100 industry pioneers from almost 40 companies and included keynotes from Pedro Umbelino, Principal Research Scientist, Bitsight Technologies on "Industry 4.0 Security: Protocols, Risks, Trends and Challenges" and from Craig Resnick, Vice-President, ARC Advisory Group on "Key Trends in Smart Manufacturing and Operational Resilience to Help Navigate Digital Transformation". ODVA’s future vision ODVA’s preceding 2025 Industry Conference covered industrial automation relevant topics ODVA’s preceding 2025 Industry Conference covered industrial automation relevant topics, including the EU Cyber Resilience Act and CIP Security, Artificial Intelligence (AI), IPv6 and EtherNet/IP, 5G and CIP Motion, Metadata for CIP devices, Carbon Neutrality and CIP Energy, EtherNet/IP In-Cabinet, Concurrent Connections, and more. The 23rd Annual Meeting concluded with an announcement regarding the newly elected ODVA leadership along with ODVA’s recent technical accomplishments and future vision. Requirements of the process industries EtherNet/IP has undergone significant transformation since the 22nd Annual Meeting by continuing to adapt to the requirements of the process industries and through adding additional security capabilities. EtherNet/IP now has expanded process device profiles that include RTD and thermocouple temperature along with level sensors, the ability to combine concurrent connections and CIP Safety, support for PA-DIM version 1.1, and a new device-based firewall and a pull model for configuration to CIP Security. This progress ensures that EtherNet/IP will maintain its leadership position through expanding covered applications and markets, increasing vendor interchangeability, supporting data models for ease of analysis and optimisation, and continuing to bolster security to deter bad actors. Future developments of ODVA technologies IPv6 now makes up almost half of all Internet traffic, and the growing proliferation of IoT devices ODVA’s 23rd Annual Meeting followed a host of technical papers showcasing the potential future developments of ODVA technologies that were presented at the 2025 Industry Conference. These papers covered technologies including IPv6, which will be included in the EtherNet/IP Specification soon after updates to the specification are finalised and published. IPv6 now makes up almost half of all Internet traffic, and the growing proliferation of IoT devices, sensors, and interconnected machinery on the OT floor demands more address space, which IPv4 cannot provide. In addition to IPv6, presentations also covered: Tools available to enable time synchronisation for 5G and how they relate to CIP Motion. CIP Security protections, including device identity management, secure communication protocols, and vulnerability mitigation, with a view to compliance with the EU Cybersecurity Resilience Act (CRA) and Machinery Safety Act An overview of the use of Artificial Intelligence (AI)/Machine Learning (ML) applications in the autonomous train market The potential addition of metadata to ODVA’s device description files to provide contextualised presentation of devices both off-line and on-line The potential for implementing Bluetooth for industrial use cases with CIP communications as the application layer interface for devices and software clients CIP Energy building blocks for real-time energy monitoring, dynamic demand-response capabilities, and energy optimisation algorithms that are needed to reach carbon neutrality ODVA defined best practices for Concurrent Connections redundancy and a brief plan for the adoption and implementation of Concurrent Connections The protection of EDS files that are used to describe a CIP device The use cases that FCG – together with ODVA, PNO and OPC Foundation – wish to address The expansion of the EtherNet/IP In-cabinet ecosystem A user’s perspective on wired EtherNet/IP network architectures
SureCloud, the provider of cloud-based, integrated risk management solutions, has announced its collaboration with cyber security ratings company BitSight. The new partnership will provide organisations with a one stop shop for end-to-end vendor onboarding and simplifying the entire vendor risk management process. BitSight provides independently validated information to rate the security posture of suppliers. These cyber security ratings, according to Gartner, will become just as important as credit ratings when assessing the risk of business suppliers by 2022. Data privacy management solution The joint offering enables “hands-off” vendor onboarding when assessing potential third party vendors by preselecting risk assessment questions based on their BitSight ratings. SureCloud vendor assessments combined with BitSight security ratings information will be consolidated into one single interface, as will the capability to organise and categorise vendors and their potential, current and ongoing risk impact to business processes, regulations, policies and more. With BitSight’s cyber security ratings integrated into SureCloud’s integrated risk, compliance and data privacy management solution, the impact of vendors can also be realised in these other broader company programs as well. Additionally, organisations will benefit from SureCloud’s powerful, real time risk dashboarding and reporting tools as well as a central portal to track assessment responses and remediation activities with the vendor – giving management greater visibility and control. Continuous risk management evaluation Businesses can manage end-to-end vendor onboarding and risk management evaluation in one place" Kathleen Randall, EVP North America at SureCloud said: “Businesses can now manage end-to-end vendor onboarding, initial and continuous risk management evaluation and issues tracking in one place. This will save a significant amount of time when, quite often, they don’t have the resources to evaluate multiple vendors. Now, they can optimise the speed at which they can assure potential partners while understanding real-time how their vendor portfolio is affecting business risk exposure.” The partnership promises to help business users initiate third party requests and manage vendor profiles, contacts, and risk scores more effectively. Vendor security teams will also benefit, as they will no longer have to manage the tedious steps of running hundreds or even thousands of vendor security assessments, leaving them to focus on strategic vendors that require more hands-on scrutiny. IT vendor risk challenges “Every organisation is challenged to monitor and manage their third-parties’ risk regularly – and quickly address related threats and incidents when they arise from vendors,” said Vineet Seth, Vice President of Product at BitSight. “By using the best of BitSight’s rating data together with SureCloud’s market leading assessment capabilities customers are able to not only take advantage of hands-off vendor onboarding but also benefit from the operational efficiency and insights they need to address IT vendor risk challenges.”
BitSight, the Standard in Security Ratings, has been named to Fast Company’s prestigious annual list of the World’s Most Innovative Companies for 2020. The World’s Most Innovative Companies list honours the businesses making the most profound impact on both industry and culture, showcasing a variety of ways to thrive in today’s fast-changing world. This year’s list features 434 businesses from 39 countries. “BitSight is transforming how the global marketplace measures and manages cyber risk,” said Stephen Boyer, Co-Founder and Chief Technology Officer at BitSight. “Earning a spot-on Fast Company’s Most Innovative list is a testament to BitSight’s unique ability to help our customers understand and achieve measurable cyber risk reduction in these uncertain times.” Cyber risk management programs BitSight earned a place on the list for its ability to transform how companies manage security risk by reducing information asymmetry and increasing transparency about cyber security through Security Ratings. BitSight Security Ratings are real-time, data-driven measurements of organisational security performance that help investors, insurers, companies, government agencies and regulators make informed, dynamic risk decisions impacting financial decisions, business relationships, and national security. BitSight’s latest innovations ensure organisations understand the cyber risk exposure of their own organisation BitSight’s latest innovations ensure organisations understand the cyber risk exposure of their own organisation and their third-party ecosystem. BitSight’s unique, industry-first Security Performance Management solutions – Peer Analytics, Enterprise Analytics, and Attack Surface Analytics – help organisations continuously measure and monitor security program performance and efficacy, allocate limited resources to focus on the areas that will have the greatest impact on their cyber risk management programs, and facilitate data-driven conversations around security that help maintain the trust of the marketplace. Future of innovation Fast Company’s editors and writers sought out the most groundbreaking businesses on the planet and across myriad industries. They also judged nominations received through their application process. The World’s Most Innovative Companies is Fast Company’s signature franchise and one of its most highly anticipated editorial efforts of the year. It provides both a snapshot and a road map for the future of innovation across the most dynamic sectors of the economy. “At a time of increasing global volatility, this year’s list showcases the resilience and optimism of businesses across the world. These companies are applying creativity to solve challenges within their industries and far beyond,” said Fast Company Senior Editor Amy Farley, who oversaw the issue with Deputy Editor David Lidsky.
Using artificial intelligence (AI) to automate physical security systems
DownloadA modern guide to data loss prevention
Download7 proven solutions for law enforcement key control and asset management
DownloadThe truth behind 9 mobile access myths
DownloadAccess control system planning phase 2
Download