What did we learn?
That's a wrap for now; but don't lose your passion for learning every day.
What we learned
We've brought you safely through the Vendor and Third-Party Protection Cybersecurity Course.
A quick recap of the places we visited and practiced:
- Third-Party Risk Management (TPRM) Framework
- Overview of Cyber Risk in the Supply Chain
- Types of Third Parties and Their Level of Risk Exposure
- Classifying Vendors by Criticality and Risk
- Questionnaires and Evidence Required for the Assessment
- Vendor Security Assessment Methodology
- Security Service Level Agreements (SLAs)
- Cybersecurity and Data Protection Contract Clauses
- Right to Audit Critical Vendors
- Managing Incidents Involving Third Parties
- Continuous Monitoring of Vendor Security Posture
- Periodic Reassessment of Critical Vendors
- Third-Party Risk Management Indicators
- Continuous Improvement of the Vendor Management Program
- Reporting Supply Chain Risk to Senior Management
Support us
Learn the ways to support the projects at no cost: Together we are more
Thank you so much for joining us on this journey 🤘🏽