---
id: 7713
title: "Pentesting for Third-Party Risk Management"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/executive-blog/penetration-testing-as-a-service/pentesting-for-third-party-risk-management-what-cisos-should-demand-from-vendors/"
published_at: "2025-11-25T00:00:00Z"
tags: ["pentesting", "continuous-testing", "third-party-risk", "dora", "nis2", "ciso", "vendor-management"]
phying_url: "https://phying.com/item/7713"
lang: en
---

# Pentesting for Third-Party Risk Management

## Summary

Learn why traditional third-party risk management fails and what CISOs must demand from vendors, including continuous pentesting, to manage third-party risk effectively.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2025-11-25T00:00:00Z
- **Original:** https://www.netspi.com/blog/executive-blog/penetration-testing-as-a-service/pentesting-for-third-party-risk-management-what-cisos-should-demand-from-vendors/
- **Phying News:** https://phying.com/item/7713