Page 2 - White Papers in Governance & Risk Management

The Third-Party Security Risk Management Playbook

This is the definitive study of third-party security risk management practices. Based on in-depth interviews of risk executives from 30 domestic and global firms, it reveals the real-world capabilities and practices employed to manage third-party security risk. Compare your own program with the Playbook data about...

Guide to Managing Third-Party Risk to Advance Digital Transformation

Digital transformation is creating increasingly complex ecosystems for companies that use third parties to augment their own digital and business capabilities. Because of the increasingly digital nature of third-party ecosystems, security and risk management leaders and teams must work together to manage third-party...

More Threats. Fewer Experts. How Will You Manage?

Organisations need to think carefully about a future that relies on getting by with existing resources versus outsourcing some or all of their security operations to a trusted advisor. There's never been a more important time to make that decision. Download this guide on addressing the cyber skills shortage and...

Sponsored by OneTrust

Overcoming Third-Party Risk Management Challenges

Provident Finanial Group is a FTSE 250 company, and - with 5,700 employees serving 2.4 million customers - Provident understands the strong expectation to work with thirdparties who respect their customer and employee information. New frameworks such as GDPR, recent data breaches, and increased customer expectations...

Sponsored by OneTrust

Maintain a Clear Bill of (Third-Party Risk) Health

As a technology company interacting with sensitive healthcare data, ClearDATA understands the importance working with trustworthy and compliant third-parties that hold with their customers' information. With critical data housed across three major public cloud providers, ClearDATA needed a centralized software...

Sponsored by OneTrust

Restructuring Your Third-Party Risk Management Program

Percona is an industry leader in providing best-of-breed enterprise-grade support, consulting, managed services, training and software for MySQL, MariaDB, MongoDB, PostgreSQL and other open source databases in on-premises and cloud environments. After noticing gaps across their third-party security and privacy...

Sponsored by OneTrust

Third-Party Vendor Security and Privacy Risks - A Security Handbook

The risks posed to enterprises managing third parties have evolved. Increasing reliance on third-party vendors, new privacy regulations, shifting cybersecurity threats, and frequent data breaches have upended the third-party risk landscape. As a result, modern risk solutions must adapt to solve both security and...

Eliminating Blind Spots for Security Leadership

The need of the hour is to unify security and IT data from different lines of an organisation to get a holistic, real-time view of cybersecurity posture.

Re-thinking Supply Chain Security

When it comes to supply chain risk, many organizations overlook how dependent they are on those critical relationships, says Matt Kraning of Expanse. As a result, they are minimizing serious security vulnerabilities. Kraning offers insights on re-thinking that dynamic. "Key, critical company operations materially...

Application Logging Challenges in Information Security

Software Applications are one of the more challenging types of log sources you will integrate into your enterprise logging strategy, but they are also one of the most important. The more awareness you have into what's happening in your environment, the more calculated actions you can take to mitigate risk. Download...

Security Pros and Cons on Different Cloud Types: SANS Analysis

As cloud computing services evolve, the cloud opens up entirely new ways for potential attacks. Cloud systems and images have operating system and component vulnerabilities just like those in the enterprise. For example, Heartbleed, Shellshock and other major bugs can affect cloud systems, and there are new issues to...

Remote Access Redefined: Managing the Rise of Third-Party Users

Traditional access models are unable to keep up with the pace of change. A new model is needed to manage complexity and live up to end-user expectations. Download this whitepaper to learn about a simpler, more secure way to manage remote access, including how IT administrators can: Provide secure access to...

Remote Access and Security Challenges & Opportunities

Remote access is important and growing, but how secure is it? More than 300 IT professionals were surveyed to gain insight into the specific threats and challenges faced by providing access to employees and third parties. Download this report to learn about: The complexity faced in implementing remote access What...

Contractor Cyber Risk Continues to Grow

Third-party contractors are often overlooked when it comes to cyber risk. The risks they can present include malware, malicious activity, or human error.

9 Misconceptions About Third-Party Risk Management

Many third-party risk management (TPRM) programs rely on tools and processes that are expensive, non-scalable, and ineffective at reducing risk. Additionally, some TPRM professionals (and the individuals who approve their budgets) are relying on subjective, outdated information to make decisions - and that information...