Articles, news, and research on third-party risk management.
Your vendors run PHP too. Here’s how to find which ones are exposed to PHP2Shell and prove they’ve patched, using scanning and a vendor questionnaire.
This is a complete overview of the Vendor Security Alliance (VSA) Questionnaire. Learn about how to use the VSA Questionnaire in this in-depth post.
Data security is the process of protecting sensitive data from unauthorized access and corruption throughout its lifecycle.
This is a complete overview of the best practices for third-party risk assessment. Learn how to reduce your third-party risk exposure effectively.
This is a complete overview of the Standardized Information Gathering (SIG) Questionnaire. Learn how to use the SIG Questionnaire in this in-depth post.
Defense in depth is a cyber security strategy that uses a series of layered, redundant defensive measures to protect sensitive data, PII and other assets.
A step-by-step guide to writing a vendor management policy: What sections to include, how to classify vendors by risk tier, and a policy framework.
This is a complete overview of continuous security monitoring. Learn how to reduce cybersecurity risk with continuous security monitoring in this post.
Learn how to control access to your third-party credentials, and how they relate to vendor risk.
This is a complete overview that outlines why third-party risk management is important. Learn about successful TPRM programs in this in-depth post.
Third and fourth party breaches account for over half of all data exposure. Here's what you need to know about third party cyber risk to protect you.
Learn the 6 key steps to create effective vendor security assessment questionnaires in 2019, so you can better manage your vendor risk exposure.
The LinkedIn data breach compromised hundreds of thousands of passwords, leaving accounts wide open across numerous sites. Spotify took action.
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
