Newsroom

Large organizations now depend on vendors and service providers to survive. They need those third parties to provide everything from critical components and goods to critical services, such ...

Vendor risk management (VRM), a part of vendor management, identifies, analyzes, monitors, and mitigates the risks that third-party vendors might pose to your organization. Such risks could ...

Every risk management program should include risks posed by your vendors. Beware, however: vendor risk management is a complex process unto itself, requiring ongoing monitoring and measureme ...

Automated tools allow your compliance management system (CMS) to work effectively. That said, a CMS is less technology unto itself and more like a corporate compliance program, where multipl ...

Although people often use the words "assess" and "analyze" interchangeably, the terms are not synonymous in risk management. Each one has a specific meaning, and the distinction between the ...

For many organizations, managing third-party risk starts out as a relatively easy proposition because the company doesn't have too many third-party relationships. As those companies mature, ...

Understand the policies and practices that differentiate traditional network security from cloud security, and how to keep your data safe.  For organizations collecting more data every yea ...

An IT security audit can often cause stress within a company — but it doesn’t need to.  Security audits are technical reviews of an IT system’s configurations, technologies, infrastr ...