Third-party risk management can learn a lot from the musk ox

Home / risk management / Third-party risk management can learn a lot from the musk ox

Third-party risk management can learn a lot from the musk ox

September 10, 2024 cyberelias 0 Comments 1 tag

Third-party risk management is a significant CISO challenge with deep business consequences. When a key third-party supplier succumbs to cyberattack, operations can grind to a halt.

In healthcare and financial services, third parties have been an attack vector of choice of late. And just this June, Russia’s APT29, aka Cozy Bear, compromised TeamViewer, a free remote access software offering that boasts 2.5 million users globally. Many businesses depend on it.

Even if you are not a TeamViewer customer, there’s a long list of similar remote desktop tools — Perimeter81, ISL Online, AnyDesk, GoToMyPC, Splashtop, RemotePC, RealVNC, GoToResolve, LogMeIn, and so on — all of which begs the question, Which third-party vendor will be next?

Tags: risk management

Explore More

MIT delivers database containing 700+ risks associated with AI

However, researchers noted in the FAQ that the Repository does have several limitations, including being limited to risks from the 43 taxonomies, so it “may be missing emerging, domain-specific risks,

How to assess your cyber insurance needs Once a company has understood the state of the current cyber insurance market and the scope of coverage, it can then explore whether

Das ist die Essenz dessen, was ich als “Moschusochsenstrategie” bezeichne. Der Hintergrund: Werden Moschusochsen von Wölfen angegriffen, bildet die Herde einen Kreis, in dessen Mitte sich die schwächeren Mitglieder befinden.