UpGuard：2023网络安全供应商风险评估终极指南白皮书（英文版）（18页）.pdf

1、Trusted by hundreds of companies worldwideThe Ultimate Guide to Cybersecurity Vendor Risk AiiTable of ContentsIntroduction 1What is Vendor Risk Management?3How to Assess Third-Party Vendors 4What are the common challenges of third-party risk assessments?6Why You Should Combine Security Ratings with

2、Questionnaires 8UpGuard supports the Complete Scope of Vendor Risk Assessments 9 Conclusion 1IntroductionThe third-party landscape is a critical cyber-attack vector that cannot be ignored.There are 3 reasons for this.1.Third-party Vendor dont have a great reputation for cybersecurity.According to a

3、Gartner survey,52%of surveyed businesses said theyre concerned about third-party cybersecurity.2.Third-party vendors have access to a significant amount of your personal data.A study by the Wiz research team revealed that 82%of companies give third parties access to all of their cloud data.3.Third-p

4、arty vendors have access to a significant amount of your personal data.In recognizing the above two trends,cybercriminals have discovered a more convenient pathway to a business private data.Instead of challenging the often resilient security controls at a victims IT boundary,its much easier to comp

5、romise their data by breaching one of their vendors.Because businesses share such a considerable portion of their customer data with their vendors,and each vendor partners with multiple businesses,a single third-party breach could potentially result in the compromise of multiple businesses and their

6、 customers.Two famous examples of such a cyberattack are the SolarWind breach and the Accellion 2As youd expect,cybercriminals are rushing to exploit the considerable benefits of targeting the third-party landscape.51%of organizations experienced a data breach caused by a third party.83%of organizat