Experts share ideas for closing potential security holes that leave organizations open to attack.
Ever since the Target breach in December 2013 and the resulting fallout, many companies have been paying closer attention to third-party security.
After all, it was one of its HVAC contractors that was the weak link in that incident, not Target itself.
And even with all the stories and conference seminars around third-party security, there’s evidence that there’s still much work ahead to plug the potential holes with third parties.
A Ponemon Institute study released earlier this year found that 67 percent of companies surveyed say they do not have or are unsure if their company has an inventory of third parties. Sixty-three percent say their organizations have no centralized control over third parties and 50 percent say third-party management is simply not a priority.
T.R. Kane, cybersecurity and privacy partner at PwC, says while it will take time for companies to put their third-party programs in place, there has been some progress during 2016.
“We’re seeing third party risk management show up as one of the top three board agenda items,” Kane says. “Companies are realizing that when a breach takes place it has a negative impact on the bottom line and share price so it makes more sense to focus on third-party management as opposed to the hundreds of millions it would cost to fix a problem.”
Here is a 10-point plan for managing third-party risk based on interviews with PwC’s Kane and input from James Christiansen, vice president for information risk management at Optiv and Fred Kneip, CEO of CyberGRX.
About the Author(s)
You May Also Like
Unleash the Power of Gen AI for Application Development, Securely
March 19, 2024The Anatomy of a Ransomware Attack, Revealed
March 20, 2024How To Optimize and Accelerate Cybersecurity Initiatives for Your Business
March 26, 2024Building a Modern Endpoint Strategy for 2024 and Beyond
March 27, 2024Building a Modern Endpoint Strategy for 2024 and Beyond
March 27, 2024