The Risk Management Blind Spot, Third-Party Identities Often Create Unrecognised Risk
https://www.ispeech.org/text.to.speech
An ever-growing area of concentration in risk management is identifying and mitigating the risks that third parties introduce to an organisation – and perhaps equally important, ensuring that third parties don’t introduce unmeasured risk. One might think that third-party governance systems, sometimes used for vendor assessments, could be used to manage the identity and access management aspects of the vendor relationship. However, most security vendors do not consider identity to be part of third-party management.
Download and read the White Paper explaining why third party identities are risk management blind spots on Infosec Magazine.
Gloss