2023年5月2日

嵌入,代码复制并粘贴到你的网站或者博客:< iframe帧边缘= = " 620 "滚动=“1”高度src = " / /www.jdsupra.com/post/contentViewerEmbed.aspx?“汽车”fid = 1599050 c - 5 f82 - 48 - b7 - a391 - 026 afbaf8708”风格= "边境:2 px固体# ccc;overflow-x:隐藏!重要;溢出:隐藏;“宽度= " 100% " > < / iframe >在当今这个相互联系的世界上,企业依赖第三方供应商提供各种产品和服务。虽然这些伙伴关系带来巨大的利益,也使公司的风险,如网络威胁,合规问题,和名誉损失。在这节课中,我采访保罗•瓦伦特的联合创始人和首席执行官VISO信任。保罗股票价值的见解,企业如何降低风险造成的第三方看到更多+在当今这个相互联系的世界上,企业依赖第三方供应商提供各种产品和服务。虽然这些伙伴关系带来巨大的利益,也使公司的风险,如网络威胁,合规问题,和名誉损失。在这节课中,我采访保罗•瓦伦特的联合创始人和首席执行官VISO信任。保罗股票价值的见解,企业如何降低风险造成的第三方供应商,连续监测的重要性,以及如何VISO信任的平台帮助企业有效地管理风险。保罗•瓦伦特VISO信任的首席执行官和创始人之一,提供自动化的公司第三方网络风险管理解决方案。 Prior to founding VISO Trust, Paul was the Chief Information Security Officer (CISO) at several companies, including Restoration Hardware, Lending Club, and ASAPP. He is a longtime technologist and security professional with experience in highly regulated industries. You’ll hear us talk about the following: Companies have more sensitive data on other companies’ infrastructure than they do internally, increasing risk and increasing the need for a robust risk management strategy. Boards have a duty of oversight to monitor their third-party risk management programs proactively. They should also keep abreast of emerging threats. Automation is a key component in a third-party risk management solution for cybersecurity. The standard approach of using questionnaires to assess third-party security could be faster, labor-intensive, and more effective. VISO Trust’s patented first-to-market Document Intelligence removes friction for vendors and provides a comprehensive risk assessment that tells customers everything they need to know to make qualified risk decisions about their third-party relationships. Compliance requires audibility. How VISO Trust helps companies manage risk after the contract is signed. Risk management and cybersecurity data are often siloed within an organization. VISO Trust helps centralize the information by providing a dashboard where customers can completely understand their overall third-party risk allowing them to make that data available across the organization. KEY QUOTES: “Some companies today have nothing internally – that is 100% cloud-native. That means typically that there are many copies of their data essentially with various other companies, perhaps all over the world… That increases what we call a tax service … which just means more risk.” – Paul Valente “I think [boards] need to be asking essentially what the risks are for their organization from a cybersecurity standpoint. They need to ask for those to be regularly reported on, regularly updated, and regularly tracked. …They also need to be aware themselves, both externally as well as relying on the executives within the company to keep them aware of emerging threats.” – Paul Valente “…our dashboards essentially allow you to list all of your third-party relationships in one single place and easily report on the status of assessments as well as report on inherent risk.” – Paul Valente See less - Embed