Not so long ago, the idea of outsourcing critical business functions or IT systems to a third party supplier would have been off-limits for many organisations because of the level of risk involved. However today, the use of third party suppliers has increased exponentially, with many organisations outsourcing even core functions of their business. Why? Outsourcing can be financially attractive, efficient and provide a competitive advantage.
In delegating key processes to third parties, organisations are potentially exposing themselves to huge amounts of risk, and while you might be able to outsource functions, you can never outsource business risks or reputation. It is common for information security to be last in the process of due diligence when selecting suppliers. So, when you have thousands of suppliers, and they have thousands of suppliers, how far should you go to assess and manage cyber risk?
In this podcast, CRMG’s Nick Frost, Todd Wade and Andrew Wilson discuss the key risks associated with third party suppliers, how to manage the process of onboarding suppliers. and how to filter through suppliers to assess those most critical to your business. Our team also discuss the importance of managing the relationships with third party suppliers and the need for an exit strategy in the event of a split.
About the Series
This podcast series has been created by the CRMG team whose experience and expertise in cybersecurity and information risks spans many years, working at CISO-level for large reputable organisations. The podcasts cover topics that are at the heart of risk, providing knowledge sharing and insights from different professional experiences.
Nick Frost Andrew Wilson Todd Wade
Director Principal Consultant Principal Consultant
If you would like our team to discuss a topic or address a certain challenge, please contact us at info@crmg-consult.com.
For more information on assessing third party risk, read our article here.
Related Articles
23.06.2020. Cybersecurity, Risk
CRMG Podcast: Remote Working and the New Cybersecurity Threat Landscape
Since the outbreak of COVID-19, there has been a period of major transition and organisations have had to quickly adapt to weather the storm. Many have managed to remain operational...
Read more…
11.06.2020. Risk, Webinars
Cyber Risk in M&A: the importance of transparency
A key principle that organisations must adopt when responding to a cyber attack is transparency. There are plenty of cautionary tales...
Read more…
02.06.2020. Governance, Podcasts
CRMG Podcast: Why Cybersecurity Policy is Still King
Developing an effective cybersecurity policy is a fundamental stepping stone when creating a comprehensive cybersecurity plan. Like any other corporate policy, they are a roadmap that defines what...
Read more…
