Fractional CISO’s Security Scoring Tool

Share this post

Black Kite & Fractional CISO
Black Kite & Fractional CISO

At Fractional CISO, we use a handful of third-party tools to help improve our clients’ cybersecurity posture.

One such tool is Black Kite, a cyber risk monitoring and threat intelligence platform. In particular, Black Kite’s scans help us identify vulnerabilities in our clients’ systems and their vendors’ systems. We use this information to prioritize, plan, and guide risk management decisions.

While we delivered this service before using Black Kite, it took much longer. It required much more manual review and an interview and evidence-collection process. Cutting down that lengthy process enables to spend more time focusing on other client needs.

We don’t endorse any one vendor for any one service. We do not have sales or referral partnerships with third-party companies – no kickbacks. When we do recommend vendors, it’s on a case-by-case basis with vendors suited to our the specific client’s needs.

As a result of this approach, we don’t normally talk about the tools we use.

But Black Kite is a tool in our toolbox, and they recently published a nice case study about us and how we use the tool to service our clients.

It is accessible on their website here. You are required to provide an email to download the case study.

vendor risk management template

Want to learn about vendor management? Click the link for an approachable guide on starting a vendor management program.

Tales From The Click

Sign up for our monthly newsletter for business leaders on minimizing cybersecurity risk.

Suceed at SOC 2

Free eBook:
5 Things to Know for your First SOC 2

  • How to scope your SOC 2
  • Estimate the cost and length of your SOC 2
  • Prepare for your SOC 2
  • Manage the SOC 2 audit period
  • Leverage your SOC 2 for growth

Related Posts

Is your Cyber Insurance really going to cover you?

Only 1/3 of cyber insurance policies actually pay out in incidents. Most companies have cyber insurance policies that insure too little, or too much, and have absurdly low caps and silly exclusions.

To learn more about cyber insurance and determine if you have the right coverage for you, join us for a free vCISO Office Hours session on Tuesday, April 18 at 1 p.m. eastern time. Bring your questions!

New Release: Free SOC 2 eBook!

Getting ready for your first SOC 2? This eBook is full of actionable advice to help you prepare for and succeed in your first SOC 2 audit.

Learn:

  • How to scope your SOC 2 project
  • How to estimate the cost and length of your SOC 2 project
  • How to prepare for your SOC 2
  • How to succeed in your SOC 2 audit period
  • How to leverage your SOC 2 report to enable your business and sales
Is your Cyber Insurance really going to cover you?

Only 1/3 of cyber insurance policies actually pay out in incidents. Most companies have cyber insurance policies that insure too little, or too much, and have absurdly low caps and silly exclusions.

To learn more about cyber insurance and determine if you have the right coverage for you, join us for a free vCISO Office Hours session on Tuesday, April 18 at 1 p.m. eastern time. Bring your questions!

New Release: Free SOC 2 eBook!

Getting ready for your first SOC 2? This eBook is full of actionable advice to help you prepare for and succeed in your first SOC 2 audit.

Learn:

  • How to scope your SOC 2 project
  • How to estimate the cost and length of your SOC 2 project
  • How to prepare for your SOC 2
  • How to succeed in your SOC 2 audit period
  • How to leverage your SOC 2 report to enable your business and sales