The Anti-Checklist Manifesto
Explore a critical examination of Third Party Risk (3PR) assessment methodologies in this thought-provoking conference talk. Delve into the shortcomings of traditional checklist-based approaches and discover a more effective strategy for evaluating vendor trustworthiness. Learn how to craft targeted questions that serve as proxies for an organization's commitment to security and trust. Gain insights into a proposed ten-question framework designed to streamline the vendor assessment process and prevent wasted resources. Understand the importance of involving security teams early in the procurement process and the limitations of relying solely on certifications like SOC2. Equip yourself with practical knowledge to improve your organization's third-party risk management practices and make more informed decisions when selecting vendors.