API Integration between SecureSketCH and SSC’s platform

There are two ways for a company to measure the effectiveness of security controls on its own systems: “Internal Evaluation” from the perspective of company employees, and “External Evaluation” from the perspective of external attackers via the Internet. Only when these two perspectives are aligned is a company able to accurately and comprehensively understand its security control effectiveness.
Most companies conduct internal and external evaluations through different services at different times. As a result, their security managers have had to review each result screen and document, and manually integrate evaluation data in order to centrally manage disparate evaluation results.

SecureSketCH enables users to view their companies’ internal evaluation results instantly, by answering about 80 questions on the website. It also provides comparison between your data and those of 1,800 other companies mainly in Japan. Because of its usefulness, more than 800 companies have been using SecureSketCH. With "Automatic Security Score Calculation” function, there is no need for security personnel to answer any questions to receive the external evaluation results. The results are automatically calculated and updated daily at the SecureSketCH platform. Personnel can observe the results of internal and external evaluations on the same screen at any time, which will further improve the efficiency and sophistication of security operations.

Features of the New Function

• Collect and analyze a company’s cyber risks, across 10 categories in 5 grades, from an attacker's point of view.
• Does not affect system operations when performing assessment.
• Enables tracking of the effectiveness of a company’s security posture and cyber risks automatically and continuously over time.

NRI Secure will continue to strengthen its SecureSketCH functions to support the promotion of global corporate group controls and supply chain risk management from a security perspective, and will continue to contribute to the creation of safe and secure information-system environments both in Japan and abroad.

• ¹  

  API integration: API stands for Application Program Interface. By using APIs, you can coordinate your systems and services with those of other companies.

• ²  

  SecureSketCH: A service which helps organizations to enhance their security measures by analyzing and visualizing own cybersecurity strengths and weakness, based on security managers’ answers to 80 questions on the SecureSketCH website. For details, please refer to the following website:https://www.secure-sketch.com/(Japanese only)

References

• ●  

  About SecurityScorecard
  Headquartered in the heart of New York City, SecurityScorecard's vision is to create a new language for measuring and communicating security risk. The company was founded in late 2013 by Dr. Aleksandr Yampolskiy and Sam Kassoumeh, two former cybersecurity practitioners who had served, respectively, as Chief Information Security Officer and Head of Security and Compliance. With cloud solutions becoming an increasingly integral part of the security technology stack Yampolskiy and Kassoumeh recognized the need to address third- and fourth-party risk as well as better understand the security capabilities of their business partners. Since its founding, the company has grown dramatically and now counts hundreds of leading brands as customers. SecurityScorecard is backed by leading venture capital investors including Sequoia Capital, GV, NGP Capital, Evolution Equity Partners, Boldstart Ventures, AXA Venture Partners among others. For more information, visit securityscorecard.com.

  Comments from the company's CEO Alex Yampolskiy
  With 70% of breaches caused directly or indirectly through the supply chain, it has become more important than ever to have a comprehensive oversight of the potential cyber risks brought to our organisations through the supply chain. We are delighted to be working with NRI Secure as the leading managed security service provider in Japan to address these challenges.

• ●  

  About NRI SecureTechnologies
  NRI SecureTechnologies, Ltd. is a recognized leading Managed Security Services Provider (MSSP) that was created in 2000 as a subsidiary of Nomura Research Institute (NRI), a company whose 50-year history includes such highlights as being Japan's first private think tank and the installation of Japan's first commercial computer system. Today, specializing in cybersecurity and recognized as a leader in advanced managed security services, NRI SecureTechnologies is focused is on delivering high-value security outcomes for our clients with the precision and efficiency that define Japanese quality.
  https://www.nri-secure.com