From the course: Cybersecurity Compliance and Regulatory Essentials for GRC Analysts
Unlock this course with a free trial
Join today to access over 25,200 courses taught by industry experts.
Vendor management
From the course: Cybersecurity Compliance and Regulatory Essentials for GRC Analysts
Vendor management
- [Instructor] Do you know how many third-party organizations have access to your company's internal systems and data? Our enterprises are increasingly interconnected and answering that question accurately has become increasingly difficult. Vendors may support your call centers, augment your help desk capabilities, run your marketing, or develop key aspects for your latest application. They drive efficiency, but they don't come without risks. Unfortunately, failure to manage those risks efficiently often turn into damage, slow operations, and loss of customer trust and revenue for your organization, not theirs. It's essential that your company implement a Vendor Management Framework. This may also be referred to as a Third-party or Supply Chain Management Framework. The framework should detail a standard and repeatable process that your cybersecurity team can use to ensure that risks are not only identified, but addressed in a way that is both effective and managed. Although I refer…