On the Radar: OneTrust Vendor Risk Management focuses on privacy and risk in supply chain relationships
The role of privacy officer is one that is growing in importance, partly due to legislation such as the EU General Data Protection Regulation (GDPR) that stipulates the nomination of a privacy officer role with accountability specifically for data privacy.
Cyberrisk Practices for Better Enterprise Risk Management
Many enterprises rely on third-party vendors to help facilitate the delivery of products and services to their customers. However, these relationships come with risk. Data privacy must be a top priority in these relationships.
GDPR for Third-party Risk Management eBook
Europe’s GDPR is widely-discussed in today’s news cycles and for good reason. The regulation impacts many organizations throughout the world, and violations of the regulation can result in material fines. One big question remains for many businesses, how do third-party services fit into this new regulation and what can organizations do to protect themselves from third-party risks to meet the standards?
The Forrester New Wave™: Cybersecurity Risk Rating Solutions
In Forrester’s evaluation of the emerging market for cybersecurity risk rating solutions, we identified the nine most significant providers in the category — Bitsight, Fico, iTrust, Normshield, Panorays, Prevalent, Riskrecon, SecurityScorecard, and upGuard — and evaluated them. This report details our findings about how well each vendor scored against 10 criteria and where they stand in relation to each other.
Cloud Risk Surface Report (1.54 MB)
This report (re)uses the same data set behind the Internet Risk Surface Report. It is derived from RiskRecon’s work in providing companies objective visibility into their third-party cybersecurity risk. For each organization analyzed, RiskRecon trains machine learning algorithms to discover internet facing systems, domains, and networks. For every asset discovered, RiskRecon analyzes the publicly accessible content, code, and configurations to assess system security and the inherent risk value of the system based on attributes such as observable data types collected and transaction capabilities. RiskRecon provided Cyentia a large anonymized sample of their production data set for this research.
Avoid Cyber Attacks and Save Money by Holding Less Data - 2019
In this white paper, learn more about why cybercriminals prioritize data hacking for financial gain, how your company can protect itself from a breach, and how data minimization practices can reduce the risks of cyber attacks and save you money.
Better Identity Coalition Policy Blueprint
The members of the Better Identity Coalition came together to create a set of consensus, cross-sector, technology agnostic policy recommendations for improving identity in America.
Executive Guide - Step-Up Your Password Resets with Identity Verification
A Comprehensive Guide to Managing Password Reset Risk with Identity Verification.
How to Strengthen Your Vendor Risk Management Strategy through Automation
As organizations grow, the number of vendors on which they rely increases to form a complex ecosystem. Many cyber attacks, however, are launched through third-party vendors.
Taking a Confident Approach Toward Managing Third-Party Risk
Building new digital relationships with third-parties increases exposure to a cybersecurity breach.
OneTrust accelerates vendor risk capabilities with CSA partnership
In December 2018, privacy management provider OneTrust announced a partnership with the Cloud Security Alliance (CSA) and the availability of free vendor risk assessment capabilities to all CSA members. In the era of the EU's General Data Protection Regulation (GDPR) and similar proliferating data protection regulations around the globe, the enterprise's capacity to evaluate its vendors and partners grows in importance.
Best Practices for Simplifying Vendor Onboarding
In this paper, we’ll reveal a practical alternative that helped our client move from 89 steps to three.
Pick the Right Path to Managing Third-Party Risk
Organizations are investing in digital technologies to drive business into the future. This also means they’re increasingly reliant on third-party vendors for outsourced services and solutions—expanding their attack surface and introducing more risk.
Third-Party Risk Management eBook
If your company employs third parties, then the responsibility falls to you and your employees to manage the risk they bring. But how do you go about designing and implementing your third-party risk management program for maximum effectiveness?
