Chamber of Commerce Floats Guidelines for Cyber ‘Credit Ratings’

The U.S. Chamber of Commerce published voluntary guidelines for cybersecurity ratings to promote transparency, accuracy, and fairness in the emerging market of security 'credit scores.' The principles call for empirical, data-driven methodologies, disclosure of data sources and model changes, mechanisms for disputing inaccuracies, and protections against pay-for-play influences; the guidelines aim to standardize rating practices though they carry no legal force.