Identity & Access May 7, 2019

How to Make Third-Party Risk Management Second Nature

4 min read - Organizations that sleep on third-party risk management could unknowingly expose their systems to remote attacks, access risks and more.

July 23, 2018

Tick Group Malware Campaign Highlights Need for Stronger Supply Chain Security

2 min read - Researchers speculated that poor supply chain security could be to blame for a new malware campaign that targets insecure USB drives to infect Windows machines.

Risk Management July 12, 2018

Why It’s Time to Cross Out the Checklist Approach to Vendor Security

3 min read - When it comes to vendor security, all the handshakes and paperwork that go into a business deal tend to get in the way of proper audits and thorough vulnerability assessments.

Data Protection May 14, 2018

Playing It Smart for Data Controllers and Processors

5 min read - Organizations preparing for GDPR should reach out to their third-party vendors to clearly define the roles, expectations and responsibilities of data controllers and processors.

Risk Management May 5, 2017

The Competing Claims of Security Vendors Sow Customer Distrust

3 min read - There is no such thing as a magic bullet for security. When security vendors push their products too hard, customers grow skeptical of the entire industry.

October 31, 2016

Oh, Negative! Red Cross Donor Breach Nabs 550,000 Records

3 min read - When donors finish giving blood, they’re often handed some sweet treats, like cookies or juice, to help get them back to full strength. But for the Australian Red Cross, the end of October 2016 comes with not-so-funny tricks along with…

CISO August 30, 2016

Dealing With Third-Party Vendor Connections in Your Network

3 min read - While most third-party vendor connections are harmless and well-intentioned, they can act as footholds for attackers to gain access to your network.

Banking & Finance December 5, 2014

Accountability Key to Third-Party Security Management

3 min read - Organizations must hold third-party vendors, partners and service providers accountable for the role they play in ensuring the enterprise's security.