SecurityScorecard Launches Project Escher to Aid Non-Profits With Vendor Risk Management
SecurityScorecard, a leader in vendor cyber risk rating, has announced an initiative to help non-profit organizations with third-party risk management. Named Project Escher, this initiative demonstrates SecurityScorecard’s commitment to the non-profit sector.
“At SecurityScorecard, we recognize that nonprofit organizations fulfill many essential roles in society, yet oftentimes do not have the resources to mitigate risk of cyber attack,” said Sam Kassoumeh, Co-founder & COO, SecurityScorecard. “Project Escher is dedicated to provisioning eligible nonprofit organizations with the knowledge and tools that are essential to improving their security posture and defending their cause against critical vulnerabilities. It’s time to change the status quo and ensure nonprofits are not obstructed from performing their vital work for the community.”
Participants in Project Escher are granted complimentary access to SecurityScorecard’s rating platform for up to five vendors.
Our Take
As we describe in our research blueprint, Build a Vendor Security Assessment Service, cyber risk rating services can be fraught with false positive errors that detract from their value proposition. To take advantage of Project Escher, an NPO will need to have the technical resources to understand security rating reports and isolate false positives. That said, this is a very positive announcement from SecurityScorecard that is worth attention by any NPO.