Michael and Jara discuss the complex subject of third-party risks and why every business, big or small, needs to be cautious about their vendors’ security practices. From identifying potential risks to evaluating security measures, Michael offers essential steps businesses should take if a vendor experiences a security incident, stressing the importance of containment, breach notification, and calling in the right experts for help.
Key Takeaways:
-
Third-Party risks are everywhere and to understand where these gaps could be, think about a vendor or third-party as “outsourced staff”
-
What to look out for when working with any vendor or third – party, namely Public Statements of Security
-
How to handle a situation if a vendor or third-party of yours is breached