top of page
Writer's picture秘書處

HKCNSA partners with SecurityScorecard to provide free cybersecurity rating reports to local charities


 Mr. Mark Lam, Regional Director for Hong Kong, China, and Macau of Security Scorecard (left), and Mr. David Ip , Founding Chairman of HKCNSA (right), teamed up to give away 20 free SecurityScorecard cybersecurity rating reports to local charitable organizations.


The recent hacking incident at Oxfam highlights the insufficient awareness of network security among many organizations. To protect local charities and enthusiastic donating citizens, the Hong Kong China Network Security Association has partnered with the globally renowned security rating agency SecurityScorecard to provide free cybersecurity rating reports to local charities, ensuring cybersecurity and unleashing greater social power. “We cannot allow charitable donors to be innocently threatened, "said by David Ip , Founding Chairman of HKCNSA.


“Through a comprehensive security risk rating report, we can help everyone understand their own network vulnerabilities and make more informed security decisions, "said by Mark Lam, Regional Director for Hong Kong, China, and Macau of SecurityScorecard.



Mobilize industry forces to safeguard local charitable organizations


The HKCNSA is committed to promoting local cybersecurity and immediately mobilizing the strength of the security industry in response to the Oxfam incident, contributing to the protection of Hong Kong citizens. David pointed out that the hacking incident of Oxfam reflects three major issues in network security for existing companies or organizations in Hong Kong:


Firstly, many enterprises, due to insufficient financial or human resources, continue to use outdated network security solutions and fail to resist new attacks;


Secondly, companies have adopted many network security solutions but have not been able to provide true protection;


Thirdly, with the continuous development of enterprises and the turnover of IT personnel, there is a lack of comprehensive review of network security vulnerabilities in various departments, especially those involving third-party network risk management.


“After the hacking incident involving Oxfam was exposed, we immediately mobilized the strength of the cybersecurity industry to support and protect local charitable organizations, preventing innocent donors from being threatened, "said by David.


“After the hacking incident involving Oxfam was exposed, we immediately mobilized the strength of the cybersecurity industry to support and protect local charitable organizations, preventing innocent donors from being threatened, "said by David.


David emphasized that "the most important step in helping charitable organizations identify real security issues is to conduct a comprehensive security examination report in order to prescribe the right medicine." Therefore, the HKCNSA contacted the globally renowned security rating agency, SecurityScorecard, to discuss countermeasures, and the company provided free cybersecurity rating reports to charitable organizations.



Detailed analysis of internal and external security threats within the enterprise


SecurityScorecard is a global leader in cybersecurity ratings, countermeasures, and resilience, with over 12 million companies rated consecutively, providing real-time insights into their own and third-party cybersecurity status. Mark pointed out, "Hacker attacks are pervasive, and coupled with the constantly changing internal and external threat situation of enterprises, Chief Security Officers (CISOs) and security teams around the world are seeking our assistance. Through a comprehensive review of network security risk report analysis through the SecurityScorecard, we can understand whether enterprises meet security requirements in operations, network security, regulatory compliance, reputation risk, and make corresponding improvements."


Mark stated that CISOs and security teams around the world have sought our assistance in analyzing their own network vulnerabilities through comprehensive security risk rating reports, in order to improve their cybersecurity levels.


Why has SecurityScorecard become the designated security rating report provider for major institutions and governments? Previously, the SecurityScorecard scanned global IP addresses every 7 days, and through global collection of public data, network entrapment mechanisms, and integrated threat intelligence, combined with a vulnerability search engine, it can provide enterprises with 10 risk category analysis and evaluation reports.


SecurityScorecard Report Top 10 Categories Risk Analysis

  • Network Security

  • DNS Health

  • Patching Cadence

  • Endpoint Security

  • IP Reputation

  • Application Security

  • Cubit score

  • Hacker Chatter

  • Information Leak

  • Social Engineering


Through the above 10 risk analyses, a comprehensive score and rating can be developed for each enterprise or organization, with a maximum of 100 points and 5 levels of A, B, C, D, and F. This facilitates the enterprise to monitor its own level of protection, understand security vulnerabilities, and make corresponding improvements. At the same time, the SecurityScorecard report will also provide recommendations for improvement actions, which not only help companies continuously monitor network risks, but also enable them to prescribe targeted solutions and invest more accurately and effectively in network security.


The SecurityScorecard summarizes a comprehensive score and rating through 10 risk analyses. The highest score is 100, and there are 5 levels of evaluation from A to F, making it convenient for enterprises to monitor their level of protection.



Improving the cybersecurity status of global enterprises through body checks


Nowadays, government agencies and renowned companies such as AXA, Netapp, and HKBN around the world are also customers of the SecurityScorecard to ensure their network security reaches a high level. Mark emphasized, "The purpose of this cooperation with the Hong Kong China Network Security Association to provide free cybersecurity assessment reports is to support local charitable organizations in making better network protection, allowing donors to donate with peace of mind, help the weak, and contribute to good deeds together."

 

David summarized, "The SecurityScorecard cybersecurity rating report is not only invaluable, but its support for local charitable organizations is also a model in the industry. Charitable organizations in need can contact us, and we will definitely help and contribute to the well-being of Hong Kong society.”



bottom of page