Guest Speaker: Tony Howlett | Presentation Topic: Managing Third Party Risk
This talk will cover the various threats, trends and best practices for countering third party risks. As companies outsource more and more functions, vendors and other third parties are gaining more and more access to critical infrastructure and privileged accounts. Examples of major vendor related breaches will be reviewed for commonality and differences. Breaking trends in new attack vectors and tools will be examined. Finally, we will discuss emerging best practices for managing third party risk in a manner that is both secure and compliant such as improving vendor onboard and offboard workflow, privileged access management technology and using risk information exchanges and rating services.