Choosing a partner business with a poor security posture makes an organization 360-times more likely to be at risk compared to choosing a top security performer, according to a new study.
The risk surface research from Cyentia Institute and RiskRecon shows that single demographic factors, such as industry, size and region, aren't enough to assess the risk posed by third parties.
A company's 'risk surface' refers to anywhere an organization's ability to operate, reputation, assets, legal obligations, or regulatory compliance is exposed to risk. The aspects of a firm’s risk exposure that are associated with or are observable from the internet are its internet risk surface. Given that a huge portion of a modern organization's value-generating activities rely on internet enabled processes and third-party relationships, the risk surface can be much more extensive than you might expect.