One group that could be easy to overlook -- but is probably the most capable in terms of addressing concerns of a realistic risk scoring system -- could just be the hacker community. What if we started using hackers to measure, understand and prioritize our security risk? A lot of work has already been done to build and curate a community of trusted ethical hackers for the advancement of crowdsourced security programs. Organizations like Google, Facebook and the U.S. Department of Defense have welcomed crowds of ethical hackers to scour their digital systems for exploitable vulnerabilities. This point might suggest that the ethical hacker community could form a knowledgeable, realistic, diverse and unbiased panel for cyber risk scoring.

Source: Forbes May 09, 2018 12:11 UTC