BitSight Security Rating Platform Third-Party Risk Management Access Instructions
Summary
The California Cybersecurity Center has published access instructions for state agencies to use the BitSight Security Rating Platform for third-party risk management. Agencies must submit access requests through the ServiceNow system by selecting 'Security Tools' and 'BitSight' from the customer support catalog. Requests must include customer ID code, approver information, and the service option (New, Modify, or Delete User).
What changed
The document provides step-by-step instructions for California state agencies to request access to the BitSight Security Rating Platform, a third-party risk management tool. Agencies must use the ServiceNow system at services.cdt.ca.gov/csm, navigate through the external customer services catalog, and select 'Security Tools' then 'BitSight' to submit a user ID request.
Affected parties—California government agencies seeking to monitor vendor and supplier cybersecurity risks—must follow the structured ServiceNow workflow including selecting the appropriate service option (New, Modify, or Delete), providing customer ID codes, and specifying account requirements in the request details. No compliance deadlines or penalties are associated with this procedural guidance.
Archived snapshot
Apr 18, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
BitSight Access Information
BitSight is a Security Rating Platform that provides third-party risk management.
Access to BitSIght must be completed through the ServiceNow system.
Access and Login to ServiceNow: https://services.cdt.ca.gov/csm
Select 'Request a Service'
Select 'External Customer Services' and then 'Customer-Supporting-Services'
In the search catalog section, type in 'User-ID Request' and select the appropriate catalog.
Complete the required sections:
Customer ID Code/Account Code
Approver
Identify service options: New, Modify, Delete User
In the 'System/Application Type' section, select 'Security Tools'
In the 'Security Tools Menu' section, select 'BitSight'
Complete the User ID Field sections as needed
In the request details, please input: "Please grant user(s) with BitSight account"
Submit request
Related changes
Get daily alerts for CA Cybersecurity CDT
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from CA CDT.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when CA Cybersecurity CDT publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.