The original post: /r/cybersecurity by /u/awwhorseshit on 2025-02-03 00:19:12.

Bitsight is a crock of shit.

I literally had SSL/TLS certificates which we did not change change letter grades and scores in a span of a week. I’ve had vendors banging my door saying we’re not compliant or “whatever” to their standard.

Then, to make matters worse, you get security analysts from companies who can’t understand risk demanding we drop everything and fix it.

This is asinine.