PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Strengthen Security to Mitigate Third-Party Risks

bishopfox.com | blog | #ai-security | #access-control | #risk-management | #third-party-risk | #security-strategy | #vendor-management
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A webcast recap on mitigating third-party risk: with AI adoption rising, organizations should return to fundamentals—people, process, data and tools—reviewing access hygiene and contractor security.
Published
Collected

Related coverage

blog · netspi.com
Pentesting for Third-Party Risk Management
Learn why traditional third-party risk management fails and what CISOs must demand from vendors, including continuous pentesting, to manage third-party risk effectively.
blog · netspi.com
The Value of Detective Controls
Preventative controls dominate security spending, but since not every attack can be stopped, detective controls deserve more attention — though noisy IDS/IPS and unreviewed logs often undercut them.
blog · netspi.com
Building Tanks
A NetSPI post relays NSA veteran Brian Snow's analogy: security must be built for a malicious environment like a tank, not a car, arguing for proactive, risk-based controls over retrofits.
blog · netspi.com
You Cannot Outsource the Consequences of a Breach
Mozilla is known to most people for its open-source and free software, most notably Firefox.
blog · bishopfox.com
What Security Leaders Think About Frontier AI Models: Firsthand of Mythos
Bishop Fox gathers CISOs from Vista and Cisco to discuss frontier AI models like Mythos: attack classes are unchanged, throughput surged, and the harness and expertise matter more than the model.
blog · bishopfox.com
Financial Services: 2023 Insights From the Ponemon Institute
Ponemon data on financial services: FinServ leads in application security, ASM and threat intel sharing via FS-ISAC; 45% call their strategy fully mature and 73% rely on third-party providers.
Back