A Closer Look: Risks in Finance

**Executive summary:** Censys' Finance & Insurance drill-down of its 2021–2022 internet scan snapshots shows that misconfigurations are the dominant observable risk (~60%), exposures account for ~28%, and vulnerabilities ~12%; the top specific issues are missing common security headers (~14%), weak TLS ciphers (~11%), and self-signed certificates (~9%). The report advises finance and insurance teams to prioritize basic hygiene—add security headers, use CA-signed certificates, and enforce strong TLS cipher configurations—to reduce the most common externally visible risks.