Security Prioritization

While BitSight and other security ratings companies don't provide advice on what security technologies a company should buy, they can provide some guidance on areas a company might want to invest to improve its risk rating, Turner said. He said assessment services like this can help pinpoint areas that present the greatest security risk to an organization, for example patching. For partners, Turner said that can be a conversation starter to sell and implement new security technologies to reduce a company's security risk.