Third Party Risk Governance - Why and How

Third Party Risk Governance - Why and How

Learn about effective third-party risk governance in this conference talk from the Central Ohio InfoSec Summit 2016. Explore strategies for managing commercial off-the-shelf software, fostering a security-focused culture, and assessing product and services risks. Delve into fourth-party relationships, various risk assessment frameworks, and key determination questionnaires. Discover best practices for remote access, business impact analysis, and security contracts. Gain insights on data retention requirements and how to implement a standalone security supplement document to enhance your organization's risk management approach.