BitSight was founded by innovative entrepreneurs and successful security market pioneers whose mission was to transform how organizations evaluate risk and security performance. They had a simple but profound solution: forget going deeper into policies and procedures; instead follow the outside-in model employed by consumer credit rating agencies. Applying this model involves continually collecting and analyzing vast amounts of external data on security behaviors and security policy implementations. No questionnaires are presented and no intrusive tests are conducted on the network being rated. BitSight Security Ratings measure a company’s security performance using an empirical and objective data-driven method.