o Knowing the cyber risk associated with dealing with other organizations has never been more important

o It directly impacts the organization’s ability to prevent, detect and recover from a cyber incident, and to protect the confidentiality, integrity and availability of its data and systems.

o This is not only a technology issue, but can cause involve legal, reputational, and operational issues

o It is very difficult to manage these risks in your organization and supply chain if you cannot identify the weak links. We believe individuals and organizations should be know the adequacy of cybersecurity measures taken both by their own organization, and others they deal with.