10 May Third Party Risk Management Don’t Pay the Price for an Unsecured Managed Services Vendor January 14, 2024 By John Verry Managed service providers (MSPs) are popular with SMBs/SMEs for good reason.  They can often maintain an organization’s network, applic... Continue reading
22 Apr Third Party Risk Management Why Your Vendor Risk Management Program Won’t Protect You from Supply Chain Risk Like the Wipro Breach January 19, 2024 By John Verry The Wipro Data Breach There is an evolving story that Wipro has been breached, and the attackers have used their foothold in Wipro to ... Continue reading
16 Apr Third Party Risk Management Agreed Upon Procedures (AUP) vs. SOC 2 January 4, 2024 By Richard Barrus Editor’s Note: This post was originally published in April 2017. It has been updated to reflect the name change from AUP to SCA. A Sta... Continue reading
15 Apr Third Party Risk Management Shared Assessments – They’re Not Just Vendor Risk Management April 15, 2019 By John Verry Editor’s Note: This post was originally published in June 2013. It has been updated to reflect the name change from AUP to SCA. It seem... Continue reading
11 Apr Third Party Risk Management Do You Really Know Who’s Handling Your Security in the Public Cloud? January 13, 2024 By Richard Barrus Recently I came across this blog post, which raises concerns that Amazon Web Services (AWS), a major player in many government cloud co... Continue reading