They had various tools at their disposal to help them do their job, but the launch of their company also brought along a problem. Their marketing team would sign contractcontracts with vendors who the entrepreneurs didn’t think they had enough visibility into, so their data could be jeopardised because of this.
So the problem was that they could not measure or even understand how secure the other companies were. They started looking for a way of computing a security score and having a holistic understanding of cyber risk. They wanted to engineer a way of providing one company with a deep view into another company’s security posture that would be instant, accurate and independently verifiable without having to ask permission or wait for weeks for answers to important security questions. Kassoumeh had this specific train of thoughts, and in what was a lightbulb moment, Yampolskiy and himhe both believed there were non-intrusive ways to gauge the security health of a company.


Using machine learning, the correlation between their security scores and the relative likelihood of a data breach can be optimised. This provides scores with more meaningful risk insights, allowing users to make smarter business and security decisions. In this way, they found that companies with a low score were more than seven times more likely to incur a violation or compliance fine than those with a high score."
Chief information security officers and security managers can use security assessments to monitor the effectiveness of their processes and controls over time, evaluate team performance and demonstrate the return of investment of security spending. They can use security assessments between audits to demonstrate that new security measures are working. And because vulnerabilities and risk signals are continuously monitored, the data analyser updates the score as soon as new protection measures are taken.