Managing Vendor and Supply-Chain Risk

You can have every good measure in place and still be hit through a vendor's weakness. This guide covers assessing and governing the risk your technology vendors themselves represent.

What you’ll learn

• How a vendor becomes your problem (updates, access)
• How to map your vendors and their access
• What security clauses to require by contract
• How to apply the least-privilege principle
• The questions to ask your critical vendors