What is your primary third-party risk management strategy?

Security & GRCThird Party Risk Management (TPRM)

Regular vendor assessments44%

Contractual requirements62%

Due diligence on third-party vendors56%

Risk-sharing agreements16%

lock icon

Please join or sign in to view more content.

244 PARTICIPANTS
9k views3 Upvotes1 Comment
IT Manager in Construction9 months ago
All of them from my side. I guess it is very important also the supply chain itself of the vendor.

Content you might like

What types of third-party risks are most concerning to your organization? 

Security & GRC

Cyber attacks & Data breaches47%

Supply chain disruptions39%

Regulatory non-compliance40%

Financial risks27%

Reputation risks24%

All of the above23%

None of the above

View Results
11.6k views9 Upvotes1 Comment

Which tech conference do you intend to attend in person next year or have already participated in this year, and what motivated your choice?

Applications & PlatformsCloudData & Analytics+15 more
Head of Enterprise Architecture MERCK Group in Healthcare and Biotecha year ago
Strategy & Architecture
Read More Comments
37.4k views5 Upvotes33 Comments

What is the approach of "Zero Trust" security model in current IT world and what makes it different traditional security approaches?

Security & GRCEngineering
IT Analyst in IT Servicesa year ago
Zero Trust is a framework for securing infrastructure and data for today's modern digital transformation.
1
Read More Comments
3.3k views2 Comments

How frequently should the policy for ICT security be reviewed?

Security & GRC
Information Security Analyst in Government6 months ago
Common industry best practice is to review security policies and procedures at least annually. However, organizations should also review and update their policies whenever there are major changes, such as:
- Compliance ...read more
1
Read More Comments
2.7k views2 Comments