The Overlooked Cyber Security Risk - 3rd Party Risk Management

Explore third-party risk management in cybersecurity through this 32-minute conference talk from BSides Columbus 2019. Delve into the often overlooked aspects of vendor evaluation, risk assessment, and lifecycle management. Learn about governance, planning, due diligence, and risk acceptance processes. Examine a real-world case study, discover lessons learned, and understand the importance of automation in managing third-party risks. Gain valuable insights into contract negotiation, ongoing monitoring, and termination procedures to enhance your organization's cybersecurity posture.

Intro
About Rose
Outline
The Overlooked
Office Fans
Vendor Evaluation
Third Party Risks
Case Study
Life Cycle
Governance
Planning
Due Diligence
Risk Assessment Lifecycle
Validate Responses
Risk Assessment Domains
Risk Level
Risk Assessment
Risk Acceptance
Scorecard
Contract negotiation
Ongoing monitoring
Termination
Case Study Review
Lessons Learned
Automation
Questions