Insurers don't have a good way to measure their customers' cyber risk because because companies don't know how vulnerable they are.

Sarah and Peter Zatko's nonprofit independent cybersecurity testing lab will produce security scores for software that "we're ready to get into a fight over," Sarah told a…

The new version of the federal Cybersecurity Framework being drafted at the National Institute of Standards and Technology will be "backwards compatible."

Public comments filed by business groups voice concern about what metrics should be used for measurement and how public that demonstration ought to be.

Large majorities also agreed with the statements "I'm spending money on network security tools and have no way to measure their effectiveness" (82 percent) and "The cybersecurity…