Third-party risk management is a significant CISO challenge with deep business consequences. When a key third-party supplier succumbs to cyberattack, operations can grind to a halt.

In healthcare and financial services, third parties have been an attack vector of choice of late. And just this June, Russia’s APT29, aka Cozy Bear, compromised TeamViewer, a free remote access software offering that boasts 2.5 million users globally. Many businesses depend on it.

Even if you are not a TeamViewer customer, there’s a long list of similar remote desktop tools — Perimeter81, ISL Online, AnyDesk, GoToMyPC, Splashtop, RemotePC, RealVNC, GoToResolve, LogMeIn, and so on — all of which begs the question, Which third-party vendor will be next?

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Was CISOs von Moschusochsen lernen können

Das ist die Essenz dessen, was ich als “Moschusochsenstrategie” bezeichne. Der Hintergrund: Werden Moschusochsen von Wölfen angegriffen, bildet die Herde einen Kreis, in dessen Mitte sich die schwächeren Mitglieder befinden.

A preview of the upcoming Black Hat conference…

EXECUTIVE SUMMARY: One of the leading cyber security conferences globally, Black Hat USA is where intellect meets innovation. The 2024 event is taking place from August 3rd – 8th, at

6 Risk-Assessment-Frameworks im Vergleich

Gut zu wissen: ISO/IEC-27001-konform zu sein bedeutet, einem weltweit eingesetzten Standard zu genügen und Datensicherheitsrisiken aktiv zu managen. 4. NIST Risk Management Framework Das ist es: Das Risk Management Framework (RMF) wurde von der