Telecom providers should be aware of a new security rating system that has been developed by supply chain security firm SecurityScorecard in cooperation with providers. The application is underpinned with artificial intelligence (AI) and is designed to assign a cybersecurity rating to providers.
According to SecurityScorecard, 85% of telecom companies in the U.S. and five European countries suffered third-party data breaches during the past year. SecurityScorecard hopes to reduce that percentage by enabling providers to understand and address their vulnerabilities.
AI Security Rating
Key elements of the telecom and cloud provider rating system include:
- Industry-specific scoring: Specific industries have distinctive complexities. SecurityScorecard cites open DNS resolvers as an example. The algorithms used by the scorecard account for “unique security landscapes and operational processes.”
- Network partitioning: Wireless providers traditionally are evaluated on all elements they own, such as IPs and domains. However, in many cases the customers control these assets. The platform now can exclude customer-controlled assets from digital asset scores.
- AI detection and categorization of assets leased to third parties: The proprietary AI models automatically detect and categorize assets leased to third parties. This enables organizations to gain insight into how these assets impact their overall score.
- Posting score with user-contributed data: Organizations can supplement security ratings with internal data, certifications, penetration testing and cybersecurity training.
More than 60,000 organizations participate in the SecurityScorecard platform, according to the company. Providers can access their security rating at no cost, the company said.
“We refine and improve our algorithm continuously to ensure that our ratings provide the most accurate reflection of a company’s cybersecurity,” said Christos Kalantzis, chief technology officer for SecurityScorecard, in a prepared statement. “We believe that together, we will transform cybersecurity for the benefit of all.”