How do you design and manage a third-party vendor risk management program? Explain your approach to assessing vendor security posture, the key areas you evaluate, how you handle vendors that do not meet your security requirements, and how you manage ongoing vendor risk over the lifecycle of the relationship.

Question

Accepted Answer

Third-party vendor risk management has become one of the most critical aspects of an organization's security program. Supply chain compromises, vendor data breaches, and regulatory requirements around third-party oversight have made it clear that an organization's security…

Sample answer preview

Unlock the full answer