With growing executive demand for changes to cybersecurity processes and awareness comes inherent challenges to an organization. To set the stage, the NotPetya attacks on Moeller-Maersk shipping company took them offline for ten days. Jim Haggemann Snabe, the Chairman, describes the heroic efforts to get 45,000 PCs and 2,500 servers back and up and running (see video) proves that ransomware attacks or never before seen attacks can have tremendous impact on business operations.
Discussions on privacy laws have taken front and center in recent weeks as European Union (EU) member states begin enforcing the General Data Protection Regulation (“GDPR”) on May 25, 2018. As we have been discussing for a while, there is confusion as data collectors try to figure out the impact of this legislation. There is no question that large, multi-national corporations will have to comply and many of these corporations are already in compliance. However, with this deadline just around the corner, smaller companies that do not actively target EU residents are struggling with how this legislation impacts them.
Anders Norremo, CEO of ThirdPartyTrust, had the pleasure of moderating a panel at the OnRamp Insurance Conference on Thursday April 12th, 2018. The panelist included Mia Boom-Ibes, Fawaz Rasheed, Steve Timmerman, and Tammy Kocher. They all gave great insight to how cybersecurity is shaping the insurance industry.
We will explore questions surrounding the New York Department of Financial Services Cyber Regulation, next-generation technologies and the biggest needs from these organizations.
While the entire world is seemingly melting with the terrifying onslaught of the enforcement of the General Data Protection Regulation (GDPR…coming to a theater near you on May 25th, 2018) there remains a significant amount of mis-information, confusion, and utter chaos within some of the world’s largest corporations (HQ’d outside of the EU) and on social media regarding the continued use of trusted third parties in support of business operations…especially, those companies not too experienced with heavily regulated environments such as banking, insurance, and other financial services.
Hi, everyone. This is Jeff Spetter from ThirdPartyTrust and I had the great pleasure of speaking with Rocio Baeza, CEO of CyberSecurityBase. Here's a recap and audio of the interview.
Topics: Vendor Risk Management
Big thank you to Morningstar for hosting the recent OWASP meetup. The evening was filled with really informative content in a couple of areas all tied to OWASP.
Metrics drive the measure of progress and stand as benchmarks during any assessment, audit or review process. They are the life blood of reporting and when it comes to vendor risk management, it is not as straight forward as you might think. Let's take a deeper look into what Guy Dulberger of Ritchie Bros. has to say about the key metrics to track when assessing vendor risk and how a risk-based approach is the new norm for vendor risk management.
"I think an important aspect of what makes a great security report, KPI or metric is understanding your business and where your greatest orgnizational risk lies."
- Guy Dulberger, Information Security Executive
Topics: Best Practices
- How to start building a vendor risk management program
- Key vendor risk management metrics
- How to keep the vendor engaged after the contract has been signed
In Part 2, panelists answer audience questions. Including what constitutes a vendor and varying risk profiles for vendors.
DePaul University's Arditti Center for Risk Management hosted its 4th annual Cyber-Risk Conference earlier this week with over 100 attendees. Three panels took place that day, one moderated by Anders Norremo, CEO of ThirdPartyTrust, on the topic of The Cloud and Third Party Vendor Managament. Panelists included Kyle Brunell, IT Risk manager at Ernst & Young; Shane Hibbard, Director of Information Security at Invenergy; Richard Latayan, Cybersecurity and Network Infrastructure Manager at Hollister.
Topics: Panel Discussions
The external risk environment is changing quickly as massive and costly cyber attacks -- Home Depot, Boston Medical Center and the Department of Veterans Affairs, among others -- have struck in the past couple years, continuing to challenge organizations to re-think approaches to vendor risk management.
Topics: Vendor Risk Management