Third-Party & Vendor Risk

Summary

Assessing and managing security risk introduced by external vendors and partners — a company's security posture is only as strong as its weakest connected third party, a lesson learned from many real breaches.

• 1Draft a basic vendor security questionnaire covering data access and security controls.
• 2Learn why supply chain attacks through a trusted vendor are an increasingly common breach vector.
• 3Understand why ongoing vendor monitoring matters, not just a one-time onboarding assessment.