Companies with poor security scores are five times more likely to breach
Dr. Bob Sohval · Cybersecurity Data at Scale // Sam Kassoumeh & Bob Sohval, SecurityScorecard (Data Driven) · Oct 26, 2017 · at 14:44
Dr. Bob Sohval, Director of Data Science at SecurityScorecard, presents data on how cybersecurity scores predict company breach likelihoods using Bayesian statistics.
0:00 / 0:10exact quote · 10.1s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“Of the probability of a breach given a poor score versus a good score, and we look at our data, and that is a ratio of five, something like that. So poor scores are predictive of breach.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Dr. Bob Sohval
Experian's outdated browser usage signals poor security hygiene, says Bob Sohval
“Northwestern Mutual on the left is, is doing a pretty reasonable job of keeping their browser browser use up to date. Experian, not so much. And this is a signal that they're not paying enough attention to security hygiene in, in their company.”
Cyber breach prediction is more accurate on portfolios than individual companies
“And I would say that, ah, in general, breach prediction on portfolios is somewhat easier than for individual entities. The law of large numbers does apply here, and it's easier to make statements at a portfolio level.”
SecurityScorecard operates proprietary honeypots and sinkholes to detect corporate malware
“We are able, we operate our own bank of sinkholes and honeypots to detect malware on, on systems that are at the, on the companies that we monitor.”
Sohval: Corporate digital footprints by IP count span over eight orders of magnitude
“In terms of digital footprint, number of IPs, that spans more than eight orders of magnitude.”