Risk Reduction - the missing link in Third Party Cyber Risk Management - Alexandre Sieira - RSA24 #1

Vendors, sales channels, partners and other kinds of third parties are essential to most businesses. Ensuring that the information security risks of those other companies don't impact your own is the remit of Third Party Cyber Risk Management (TPCRM) teams. It is increasingly evident, however, that the existing practices and tools are not up to the challenge. They make the process even more adversarial than it needs to be, are focused on risk transfer and/or acceptance rather than reduction; are …

businesses companies cyber cyber risk cyber risk management don impact information information security information security risks link management missing own parties partners party risk risk management risk reduction risks rsa24 sales security security risks teams third third parties vendors