Vendor Risk Management Insights

    iconemail-box

    Subscribe to our blog

    Security never sleeps. Get the most up-to-date information by subscribing to the RiskRecon blog.

    In Cybersecurity it’s Not Good Enough to Simply Trust

    Unfortunately, too many enterprises today are completely blindsided by down-stream impact from

    New Toolkit for Assessing AWS Deployments and Operations

    By: Kelly White, Founder and CEO, RiskRecon Achieving good third-party risk outcomes requires that your vendors operate secure cloud environments. Amazon Web ...

    You Can't Abstract Away Risk

    The fundamental truth about third-party risk is that an organization can abstract away IT complexity and outsource IT work, but it can never outsource the cyber ...

    Third-Party Technical Relationships: More Present Than You Think

    Many organizations realize that they need to do a better job at managing third-party risk, but they don’t prioritize the problem because they don’t realize the true scope of the ...
    Observing Malicious Activity

    RiskRecon Observed Malicious Activity During the COVID-19 Pandemic

    By: Jonathan Ehret, Vice President of Strategy & Risk, RiskRecon The onset of the COVID-19 pandemic has brought many changes to our world. ...
    ISO 20071

    Third-Party Risk Management and ISO 20071

    In mid-2019, a medical testing company was informed by one of its vendors that the vendor had experienced a significant data breach. This data breach involved ...

    How to Start Thinking About Nth Party Risk - Part 2

    If you're starting to explore the issue of Nth-party risk, our first piece of advice is to have some serious talks with your insurers and your lawyers. Frank discussions with insurers over ...
    Nth Party Risk

    How to Start Thinking About Nth Party Risk - Part 1

    As many enterprises are finally starting to wrap their arms around the problem of third-party risk, they're also recognizing that the risks they incur from connections with outside organizations ...

    The Analyst View: Measurement and Reporting

    In the final blog of our three-part series, guest authored by Forrester senior analyst Paul McKay, we discuss what third-party risk information is being shared ...

    Jesse Card - RiskRecon's Founding Developer

    By: Kelly White, Founder and CEO, RiskRecon