FICO Cybersecurity Score Is Twice as Accurate as Competing Scores

SAN JOSE, Calif., Dec. 5, 2016

HIGHLIGHTS:

• FICO^® Enterprise Security Score performs twice as well as other scores at measuring the risk of an organization having a major data breach
• FICO Enterprise Security Score can be used by an organization, its partners and its insurers to measure cybersecurity effectiveness from an outside view
• The score is empirically derived based on patented security techniques developed by FICO researchers over 60 years

Silicon Valley analytics firm FICO today announced impressive results for its FICO^® Enterprise Security Score, which assesses the forward-looking cybersecurity risk of trusted third parties and business partners. The company's research shows that its score is twice as accurate as competing scores in terms of forecasting the likelihood that a company will suffer material data loss from a breach.

More information: http://www.fico.com/en/products/fico-enterprise-security-scoring   

"The goal of any predictive model in this category is to maximize the separation of good and bad outcomes in the specified performance period," said Scott Zoldi, FICO's chief analytics officer and the primary architect of FICO's security analytics. "A key effectiveness measurement of a predictive model is its dynamic range – the difference in outcome odds between the highest and lowest scores produced by the model. The models powering FICO Enterprise Security Score have a dynamic range of more than 11X, meaning the odds of a major breach are 11 times greater for the lowest-scoring organizations than for the highest-scoring organizations. This separation is more than twice as large as other scores in the market that have published results."

The FICO Enterprise Security Score helps enterprises vet the security risk of potential partners and monitor ongoing risk across an entire portfolio of existing partnerships. The results reflect the long-term stability of partners' security practices, the effectiveness of security policies, and the condition of network assets.  The scores are delivered with robust capabilities for ongoing management and benchmarking, including the ability to organize entities into portfolios, create peer groupings, and generate and route alerts for changing conditions or behaviors.     

"An institution's liability for a data breach now extends throughout its entire supply chain," said Doug Clare, FICO vice president for cybersecurity solutions. "As a result, organizations are responsible for security risks introduced by their business partners' networks -— risks that are beyond the immediate control of their respective IT departments. With enterprises often interfacing with hundreds or even thousands of vendors and business partners, the aggregate risk exposure is significant."