Articles, news, and research on third-party risk management.
Your vendors run PHP too. Here’s how to find which ones are exposed to PHP2Shell and prove they’ve patched, using scanning and a vendor questionnaire.
The digital supply chain uses a network approach to apply digital technologies throughout the supply chain, allowing better integration. Learn more.
Learn about UpGuard's new custom questionnaire builder for vendor risk assessments.
Supply chain attacks are on the rise. Follow these prevention tips to avoid falling victim to these devastating breaches.
Supply chain attacks are on the rise but their attempts could be detected with Honeytokens. Learn how to implement them into your cybersecurity.
UpGuard's guide to vendor due diligence: what it is, how to run the 5-step process, and the checklist to assess a vendor's security posture.
A third-party vendor is any entity that your organization does business with. This can include suppliers, manufacturers, service providers, and more.
Learn what a third-party risk management framework is and how to select the right one for your organization in this in-depth post.
This is a complete guide to security ratings and common use cases. Learn why security and risk management teams have adopted security ratings in this post.
Data breaches by third-party vendors can damage your business, read on and learn about data breach types and third-party vendor risk.
This is a complete guide to preventing third-party data breaches. Learn about how organizations like yours are keeping themselves and their customers safe.
Compare SIG, CAIQ, VSA, NIST, and HIPAA vendor security questionnaires: when to use each, and a side-by-side table.
Free vendor risk assessment questionnaire template from UpGuard: copy the questions, score vendors, and attach evidence. Includes FAQs.
Protected health information (PHI) is any information about health status, provision of health care or payment for health care that is created or collected
A comprehensive overview for managing third-party risk. Learn about common causes of third-party risks and how to mitigate them in this post.
Learn how to build and scale your third-party risk management program with expert guidance and a practical implementation checklist to minimize risk.
This is a complete overview of the Consensus Assessments Initiative Questionnaire (CAIQ). Learn how to use the CAIQ in this in-depth post.
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
