Third-party risk management is a significant CISO challenge with deep business consequences. When a key third-party supplier succumbs to cyberattack, operations can grind to a halt.

In healthcare and financial services, third parties have been an attack vector of choice of late. And just this June, Russia’s APT29, aka Cozy Bear, compromised TeamViewer, a free remote access software offering that boasts 2.5 million users globally. Many businesses depend on it.

Even if you are not a TeamViewer customer, there’s a long list of similar remote desktop tools — Perimeter81, ISL Online, AnyDesk, GoToMyPC, Splashtop, RemotePC, RealVNC, GoToResolve, LogMeIn, and so on — all of which begs the question, Which third-party vendor will be next?