As the first crypto firm to sign, BitGo, the leader in digital asset security, encourages industry participants to commit to the best practices promoted by CISA.
PALO ALTO, Calif., July 31, 2024 /PRNewswire-PRWeb/ -- BitGo becomes the first crypto company to sign the Cybersecurity and Infrastructure Security Agency (CISA) Pledge to promote collective action to enhance cybersecurity resilience across various sectors. Signing the CISA pledge necessitates meeting the following requirements:
- Increasing the use of multi-factor authentication (MFA).
- Decreasing the use of default passwords.
- Reducing the "prevalence of one or more vulnerability classes across the manufacturer's products."
- Increasing the installation of security patches by customers.
- Publishing vulnerability disclosure policies that authorize testing by customers and provide a "clear channel" to report vulnerabilities, as well as publicly disclose them "in line with coordinated vulnerability disclosure best practices and international standards."
- Reporting accurate "Common Weakness Enumeration (CWE) and Common Platform Enumeration (CPE) fields in every Common Vulnerabilities and Exposures (CVE) record for the manufacturer's products."
- Increasing the "ability for customers to gather evidence of cybersecurity intrusions affecting the manufacturer's products."
BitGo already goes above and beyond these security minimums and is signing the pledge to set an example for the digital asset industry and encourage other companies in this vertical to sign the pledge in a commitment to enhanced security standards.
Richard Reinders, CISO at BitGo, shared, "We applaud CISA for establishing standards for best security practices. As the leaders in this space on secure custody solutions, we already incorporate CISA's best practices and more. By signing the pledge, we aim to be an example for the digital asset industry and to promote the highest security standards across this vertical."
BitGo has partnered with Bugcrowd to continue BitGo's bug bounty program.
"At Bugcrowd, we are firm believers that it takes a crowd of defenders to make our world safer, and we are are thrilled to partner with BitGo, a global leader of the most secure and scalable wallet solutions for the digital asset economy, as they become the first crypto company to sign the pledge," said Dave Gerry, CEO of Bugcrowd. "We are honored to partner with BitGo for their bug bounty program, leveraging our extensive network of hackers to ensure their platforms remain secure and resilient."
Since 2013, BitGo products have been anchored in the utmost reliable security and technology. We are committed to this mission and continue to lead by our best practices.
Learn more about CISA.
About BitGo
BitGo is the leading infrastructure provider of digital asset solutions, offering custody, wallets, staking, trading, financing and settlement out of regulated cold storage. Founded in 2013, BitGo is the first digital asset company to focus exclusively on serving institutional clients.
BitGo is dedicated to advancing a digital financial services economy that is borderless and accessible 24/7. With multiple Trust companies around the world, BitGo is the preferred security and operational backbone for more than 1,500 institutional clients in 50 countries, including many of the world's top brands, cryptocurrency exchanges and platforms. BitGo also secures approximately 20% of all on-chain Bitcoin transactions by value and is the largest independent digital asset custodian. For more information, please visit http://www.bitgo.com.
Media Contact
Sarah Cohen, Melrose PR, (310) 260-7901, [email protected]
SOURCE BitGo
Share this article