--- title: ThirdPartyTrust Blog | Jeffrey Spetter description: VRM, Vendor Risk Managerment, Vendor Intelligence --- ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, [![ThirdPartyTrust](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/3ptlogonav-1%20(1).png)](https://www.thirdpartytrust.com/) [![ThirdPartyTrust](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/smaller-1.png)](https://www.thirdpartytrust.com/) - [Product](https://www.thirdpartytrust.com/enterprise-solutions) - [Enterprise Solutions](https://www.thirdpartytrust.com/enterprise-solutions) - [Vendors Solutions](https://www.thirdpartytrust.com/vendor-solutions) - Industries - [Financial Services](http://www.thirdpartytrust.com/financial-services) - [Life Sciences](https://www.thirdpartytrust.com/lifesciences) - [Healthcare](https://www.thirdpartytrust.com/healthcare) - [Energy](https://www.thirdpartytrust.com/energy) - News & Events - [Blog](https://info.thirdpartytrust.com/blog) - [Press Releases](https://info.thirdpartytrust.com/pressreleases) - [ThirdPartyTrust Events](https://www.thirdpartytrust.com/thirdpartytrust-events) - Resources - [Who We Are](https://www.thirdpartytrust.com/about) - [Videos](https://www.thirdpartytrust.com/videos) - [Become a Partner](https://www.thirdpartytrust.com/become-a-partner) - [Current Partners](https://www.thirdpartytrust.com/partners) - [API](http://docs.thirdpartytrust.com/) - [Product Security](https://www.thirdpartytrust.com/security) - [Login](https://app.thirdpartytrust.com/) ,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, # ThirdPartyTrust Blog ## Jeffrey Spetter Find me on: ### Recent Posts ## [Data is the new oil and breaches are the new spills; so where is the leak?](https://info.thirdpartytrust.com/blog/data-is-the-new-oil-and-breaches-are-the-new-spills-so-where-is-the-leak) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 7/6/18 9:11 AM - [Tweet](https://twitter.com/share) [![0*XnuUkRvCz6y3k8PN](https://cdn-images-1.medium.com/max/752/0*XnuUkRvCz6y3k8PN.jpg)](https://info.thirdpartytrust.com/blog/data-is-the-new-oil-and-breaches-are-the-new-spills-so-where-is-the-leak) The former CEO of Intel, Brian Kzranich said last month, “Data, I look at it as the new oil. It’s going to change most industries across the board. Oil changed the world in the 1900s. It drove cars, it drove the whole chemical industry,” Krzanich explains. [Read More](https://info.thirdpartytrust.com/blog/data-is-the-new-oil-and-breaches-are-the-new-spills-so-where-is-the-leak) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/data-is-the-new-oil-and-breaches-are-the-new-spills-so-where-is-the-leak#comments-listing) Topics: [Vendor Risk Management](https://info.thirdpartytrust.com/blog/topic/vendor-risk-management) ## [The Real Challenges of Moving Cyber Initiatives Forward](https://info.thirdpartytrust.com/blog/whats-going-to-be-hard-about-moving-cyber-initiatives) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 5/29/18 9:45 AM - [Tweet](https://twitter.com/share) [![Jim Hagemann Snabe](https://www.bleepstatic.com/content/posts/2018/01/25/Jim_Hagemann_Snabe.jpg)](https://info.thirdpartytrust.com/blog/whats-going-to-be-hard-about-moving-cyber-initiatives) With growing executive demand for changes to cybersecurity processes and awareness comes inherent challenges to an organization. To set the stage, the NotPetya attacks on Moeller-Maersk shipping company took them offline for ten days. Jim Haggemann Snabe, the Chairman, describes the heroic efforts to get 45,000 PCs and 2,500 servers back and up and running ([see video](https://www.bleepingcomputer.com/news/security/maersk-reinstalled-45-000-pcs-and-4-000-servers-to-recover-from-notpetya-attack/)) proves that ransomware attacks or never before seen attacks can have tremendous impact on business operations. [Read More](https://info.thirdpartytrust.com/blog/whats-going-to-be-hard-about-moving-cyber-initiatives) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/whats-going-to-be-hard-about-moving-cyber-initiatives#comments-listing) Topics: [Regulation](https://info.thirdpartytrust.com/blog/topic/regulation), [IoT Security](https://info.thirdpartytrust.com/blog/topic/iot-security), [Vendor Risk Management](https://info.thirdpartytrust.com/blog/topic/vendor-risk-management), [third party risk](https://info.thirdpartytrust.com/blog/topic/third-party-risk) ## [Guest Blog by Todd Tressler - Tick tock: a GDPR Primer to meet the deadline next week](https://info.thirdpartytrust.com/blog/guest-blog-by-todd-tressler-tick-tock-a-gdpr-primer-to-meet-the-deadline-next-week) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 5/23/18 2:52 PM - [Tweet](https://twitter.com/share) [![](http://privacyriskreport.com/wp-content/uploads/2018/05/GDPR-blog-size-945x601.jpg)](https://info.thirdpartytrust.com/blog/guest-blog-by-todd-tressler-tick-tock-a-gdpr-primer-to-meet-the-deadline-next-week) Discussions on privacy laws have taken front and center in recent weeks as European Union (EU) member states begin enforcing the General Data Protection Regulation (“GDPR”) on May 25, 2018.  [As we have been discussing for a while](http://privacyriskreport.com/ironing-out-the-wrinkles-in-data-legislation-a-case-study/), there is confusion as data collectors try to figure out the impact of this legislation.  There is no question that large, multi-national corporations will have to comply and many of these corporations are already in compliance.  However, with this deadline just around the corner, smaller companies that do not actively target EU residents are struggling with how this legislation impacts them. [Read More](https://info.thirdpartytrust.com/blog/guest-blog-by-todd-tressler-tick-tock-a-gdpr-primer-to-meet-the-deadline-next-week) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/guest-blog-by-todd-tressler-tick-tock-a-gdpr-primer-to-meet-the-deadline-next-week#comments-listing) Topics: [third party risk](https://info.thirdpartytrust.com/blog/topic/third-party-risk), [GDPR](https://info.thirdpartytrust.com/blog/topic/gdpr) ## [How is Cyber Shaping the Insurance Industry? Learn From Pros at Allstate, Trustmark and BCSF.](https://info.thirdpartytrust.com/blog/how-is-cyber-shaping-the-insurance-industry) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 4/23/18 3:28 PM - [Tweet](https://twitter.com/share) [![speakers](https://info.thirdpartytrust.com/hubfs/OnRamp%202018/speakers.png)](https://info.thirdpartytrust.com/blog/how-is-cyber-shaping-the-insurance-industry) Anders Norremo, CEO of ThirdPartyTrust, had the pleasure of moderating a panel at the OnRamp Insurance Conference on Thursday April 12th, 2018.  The panelist included [Mia Boom-Ibes](https://www.linkedin.com/in/mia-boom-ibes-593768), [Fawaz Rasheed](https://www.linkedin.com/in/fawaz-rasheed-cissp-515b67/), [Steve Timmerman](https://www.linkedin.com/in/stevetimmermancalifornia/), and [Tammy Kocher](https://www.linkedin.com/in/tammykocher/). They all gave great insight to how cybersecurity is shaping the insurance industry.  We will explore questions surrounding the New York Department of Financial Services Cyber Regulation, next-generation technologies and the biggest needs from these organizations.  [Read More](https://info.thirdpartytrust.com/blog/how-is-cyber-shaping-the-insurance-industry) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/how-is-cyber-shaping-the-insurance-industry#comments-listing) Topics: [Regulation](https://info.thirdpartytrust.com/blog/topic/regulation), [third party risk](https://info.thirdpartytrust.com/blog/topic/third-party-risk), [Panel Discussions](https://info.thirdpartytrust.com/blog/topic/panel-discussions) ## [Guest Blog by Mike Baier on GDPR and the Integration of Third Party Service Providers](https://info.thirdpartytrust.com/blog/guest-blog-by-mike-baier-on-gdpr) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 4/5/18 4:13 PM - [Tweet](https://twitter.com/share) [![general-data-protection-regulation-concept-illustration-25-may-2018-illustration-id903899986](https://www.tes.com/sites/default/files/styles/news_article_hero/public/general-data-protection-regulation-concept-illustration-25-may-2018-illustration-id903899986.jpg?itok=2-I91gux)](https://info.thirdpartytrust.com/blog/guest-blog-by-mike-baier-on-gdpr) While the entire world is seemingly melting with the terrifying onslaught of the enforcement of the General Data Protection Regulation (GDPR…coming to a theater near you on May 25th, 2018) there remains a significant amount of mis-information, confusion, and utter chaos within some of the world’s largest corporations (HQ’d outside of the EU) and on social media regarding the continued use of trusted third parties in support of business operations…especially, those companies not too experienced with heavily regulated environments such as banking, insurance, and other financial services. [Read More](https://info.thirdpartytrust.com/blog/guest-blog-by-mike-baier-on-gdpr) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/guest-blog-by-mike-baier-on-gdpr#comments-listing) Topics: [third party risk](https://info.thirdpartytrust.com/blog/topic/third-party-risk), [GDPR](https://info.thirdpartytrust.com/blog/topic/gdpr) ## [TPT InfoSec Interviews: Rocio Baeza, CEO Cybersecuritybase](https://info.thirdpartytrust.com/blog/tptinterviewrociobaeza) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 3/27/18 12:39 PM - [Tweet](https://twitter.com/share) [![Untitled.png](https://info.thirdpartytrust.com/hubfs/Untitled.png)](https://info.thirdpartytrust.com/blog/tptinterviewrociobaeza) Hi, everyone. This is Jeff Spetter from ThirdPartyTrust and I had the great pleasure of speaking with Rocio Baeza, CEO of CyberSecurityBase. Here's a recap and audio of the interview.  [Read More](https://info.thirdpartytrust.com/blog/tptinterviewrociobaeza) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/tptinterviewrociobaeza#comments-listing) Topics: [Vendor Risk Management](https://info.thirdpartytrust.com/blog/topic/vendor-risk-management) ## [Experts Share Important Metrics for Assessing Vendor risk](https://info.thirdpartytrust.com/blog/experts-share-their-most-important-metrics-for-assessing-vendor-risk) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 1/10/18 4:43 PM - [Tweet](https://twitter.com/share) [![Dashboard- Heat Map.jpeg](https://info.thirdpartytrust.com/hubfs/Dashboard-%20Heat%20Map.jpeg)](https://info.thirdpartytrust.com/blog/experts-share-their-most-important-metrics-for-assessing-vendor-risk) Metrics drive the measure of progress and stand as benchmarks during any assessment, audit or review process. They are the life blood of reporting and when it comes to vendor risk management, it is not as straight forward as you might think. Let's take a deeper look into what [Guy Dulberger](https://www.linkedin.com/in/guydulberger/) of Ritchie Bros. has to say about the key metrics to track when assessing vendor risk and how a risk-based approach is the new norm for vendor risk management.  >  *"I think an important aspect of what makes a great security report, KPI or metric is understanding your business and where your greatest orgnizational risk lies."* > > - Guy Dulberger, Information Security Executive [Read More](https://info.thirdpartytrust.com/blog/experts-share-their-most-important-metrics-for-assessing-vendor-risk) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/experts-share-their-most-important-metrics-for-assessing-vendor-risk#comments-listing) Topics: [Best Practices](https://info.thirdpartytrust.com/blog/topic/best-practices) ## [Data Risk in the Third-Party | Ponemon Institute](https://info.thirdpartytrust.com/blog/ponemoninstitutepart1) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 10/12/17 8:29 AM - [Tweet](https://twitter.com/share) [![](https://d2vo5wp34bl1tg.cloudfront.net/uploads/2017/09/bg-opus-6-trends-third-party-data-risk-study.jpg)](https://info.thirdpartytrust.com/blog/ponemoninstitutepart1) The Ponemon Institute recently rolled out there second annual study of [Data Risk in the Third-Party Ecosystem](https://info.thirdpartytrust.com/hubfs/Ponemon_report_Final%20(1).pdf). The study aims to understand trends in the challenges companies face in protecting sensitive and confidential information shared with third parties and 4th party vendors.  [Read More](https://info.thirdpartytrust.com/blog/ponemoninstitutepart1) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/ponemoninstitutepart1#comments-listing) Topics: [Vendor Risk Management](https://info.thirdpartytrust.com/blog/topic/vendor-risk-management), [third party risk](https://info.thirdpartytrust.com/blog/topic/third-party-risk) ## [7 Risks to Data In the Third Party Eco-system](https://info.thirdpartytrust.com/blog/7-risks-to-data-in-the-third-party-eco-system) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 8/21/17 8:30 AM - [Tweet](https://twitter.com/share) [![](http://en.fasoo.com/_data/ckfinder/images/en/ponemon-logo.png)](https://info.thirdpartytrust.com/blog/7-risks-to-data-in-the-third-party-eco-system) The Ponemon Institute conducted a study back in April of 2016 surveying companies to understand the challenges they face in protecting sensitive and confidential information shared with third parties resulting in [*Data Risk in the Third-Party Ecosystem*](https://www.ponemon.org/local/upload/file/Data%20Risk%20in%20the%20Third%20Party%20Ecosystem_BuckleySandler%20LLP%20and%20Treliant%20Risk%20Advisors%20LLC%20Ponemon%20Research%202016%20-%20FINAL2.pdf) study. [Read More](https://info.thirdpartytrust.com/blog/7-risks-to-data-in-the-third-party-eco-system) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/7-risks-to-data-in-the-third-party-eco-system#comments-listing) Topics: [Regulation](https://info.thirdpartytrust.com/blog/topic/regulation), [Vendor Risk Management](https://info.thirdpartytrust.com/blog/topic/vendor-risk-management), [Best Practices](https://info.thirdpartytrust.com/blog/topic/best-practices) ## [Who will be in charge of IoT security? ](https://info.thirdpartytrust.com/blog/who-will-be-in-charge-of-iot-security) Posted by [Jeffrey Spetter](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter) on 6/19/17 10:29 AM - [Tweet](https://twitter.com/share) [![](http://www.www8-hp.com/us/en/images/0317_TAW_mo5_banner_tcm_245_2411082.png)](https://info.thirdpartytrust.com/blog/who-will-be-in-charge-of-iot-security) --- ****The internet of things has huge promise in the upcoming years to improve efficiencies in decade old industries and provide insight for predictive analytics software companies to help shape the way people interact with the physical environment. [Gartner](http://www.gartner.com/newsroom/id/3598917) projects the hype of total connected devices to be as high as 20.4B globally by 2020 and reaching a total spend on hardware close to $3 trillion. ****   [Read More](https://info.thirdpartytrust.com/blog/who-will-be-in-charge-of-iot-security) 0 Comments [Click here to read/write comments](https://info.thirdpartytrust.com/blog/who-will-be-in-charge-of-iot-security#comments-listing) Topics: [IoT Security](https://info.thirdpartytrust.com/blog/topic/iot-security) [All posts](https://info.thirdpartytrust.com/blog/all) [Next](https://info.thirdpartytrust.com/blog/author/jeffrey-spetter/page/2) ThirdPartyTrust is a vendor risk management platform strengthening cyber risk intelligence and simplifying the management process for enterprises performing vendor risk assessments.   By analyzing both third and fourth party vendor cyber risk using a network-based solution, like 3PT, trust is built and mapped within your vendor eco-system. ### Subscribe to Email Updates ### Recent Posts ### Posts by Topic - [Vendor Risk Management (13)](https://info.thirdpartytrust.com/blog/topic/vendor-risk-management) - [third party risk (7)](https://info.thirdpartytrust.com/blog/topic/third-party-risk) - [Regulation (6)](https://info.thirdpartytrust.com/blog/topic/regulation) - [Data Breaches (3)](https://info.thirdpartytrust.com/blog/topic/data-breaches) - [Panel Discussions (3)](https://info.thirdpartytrust.com/blog/topic/panel-discussions) - [Partnerships (3)](https://info.thirdpartytrust.com/blog/topic/partnerships) - [Best Practices (2)](https://info.thirdpartytrust.com/blog/topic/best-practices) - [Cyber Tools (2)](https://info.thirdpartytrust.com/blog/topic/cyber-tools) - [GDPR (2)](https://info.thirdpartytrust.com/blog/topic/gdpr) - [IoT Security (2)](https://info.thirdpartytrust.com/blog/topic/iot-security) see all [![facebook](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/f1.png)](https://www.facebook.com/thirdpartytrust) [![twitter](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/13.png)](https://twitter.com/thirdpartytrust) [![linkedin](https://info.thirdpartytrust.com/hubfs/Thirdpartytrust%20April2017/Thirdpartytrust%20April2017-images/11.png)](https://www.linkedin.com/company/thirdpartytrust) [sign up for our newsletter](https://www.thirdpartytrust.com/sign-up-for-newsletter)