White Papers in Governance & Risk Management

Third-Party Privileged Access: Seamless. Efficient. Secure.

CyberArk Vendor Privileged Access Manager (Vendor PAM) is an integrated SaaS solution that enables fast and secure privileged access for vendors, consultants, maintenance personnel and other authorized external 3rd parties. With Vendor PAM, organizations can implement Zero Trust-based just-in-time access, biometric...

Sponsored by ProcessUnity

Integrating the NIST CSF into Third-Party Risk Management: Strategies for Enhanced Security and Compliance

Third-party risk management (TPRM) professionals evaluate service providers from a range of industries and geographies, meaning many of the third parties they work with operate based on different regulatory standards, often with hugely varied access permissions, responsibilities and internal cybersecurity policies....

Sponsored by ProcessUnity

InfoSec: Applying AI to Third-Party Risk Management to Achieve Consistency

Information Security teams face a mounting challenge: as businesses outsource more critical functionality to third parties, third-party cybersecurity incidents are hitting unprecedented highs. Add to this a widespread regulatory push for increasingly strict third-party risk management (TPRM) practices, and Infosec...

Sponsored by ProcessUnity

Tracking and Mitigating Emerging Threats in Third-Party Risk Management

In business environments defined by large, interconnected vendor ecosystems, it’s extremely hard to identify emerging threats, let alone choose which ones to address. Organizations are overwhelmed by the many indicators of compromise (IoCs) they are alerted to, yet many lack the resources to investigate even a...

runZero Recognized as a Customers' Choice in 2024 Gartner® Peer Insights™ Report for CAASM

With 29 Gartner Peer Insights reviews as of 31st March 2024, the most of any vendor included in the report, runZero received ratings from customers at organizations with annual revenues ranging from 50M to 10B+.

The State of Asset Security: Uncovering Alarming Gaps & Unexpected Exposures

As a leading CAASM platform, runZero has a unique perspective on the state of asset security. Their research team recently analyzed tens of millions of sample data points to better understand today’s attack surfaces, exposure patterns, and emerging threats — and the results were surprising.

2024 State Of Identity Security in Financial Services

Download this whitepaper to take a deep dive into alarming statistics about the challenges faced by the finance industry

Third-Party Risk: What Are Your Third Parties Not Telling You?

Third parties present risks that can have significant negative impacts on your organization, including data breaches, reputational damage, regulatory violations, and financial losses.

TPRM Privacy Compliance: Questions to Ask When Working with Third Parties

Working with third parties introduces new business risks, making it crucial to design a third-party risk management (TPRM) program that enables privacy compliance. What steps can you take to build a TPRM program that aligns with your privacy goals?

6 Steps to Effective Third-Party Risk Management

When vendors or contractors don't deliver, the impact can be devastating and long-lasting without a proper third-party risk management program in place. See the path to managing third-party risk effectively with a checklist that outlines the six steps for a sound TPRM program.

Sponsored by ProcessUnity

Tracking and Mitigating Emerging Threats in Third-Party Risk Management

Companies are alerted to more indicators of compromise (IoCs) than ever before, leaving third-party risk management (TPRM) teams in a difficult position: they need to determine which IoCs demand investigation and which third parties were impacted by a given exploit, all while managing alerts at scale and trying to...

Sponsored by ProcessUnity

Close Your Third-Party Risk Vulnerability Gap

There's too much TPRM work to be done and not enough resources, creating a vulnerability gap in your program. Download this white paper for practical advice on how to identify, measure and systematically close it.

Sponsored by ProcessUnity

DORA Key Provisions and Best Practices

Familiarize yourself with the new ICT-related demands placed on financial institutions in the EU so you can achieve compliance in time for DORA enforcement.

Research Results Report: Securing Your Third-Party Supply Chain Through Security Awareness

Welcome to the report summarizing the survey, "Securing Your Third-Party Supply Chain Through Security Awareness." In late fall 2023, Information Security Media Group partnered with Forta's Terranova Security and surveyed over 100 senior cybersecurity professionals to identify: The top organizational challenges in...

Key Metrics to Optimize Your Third-Party Risk Management Program

With the right third-party risk management (TPRM) metrics, you can mature your program and better communicate the value of your program to business leaders.

White Papers

Third-Party Privileged Access: Seamless. Efficient. Secure.

Integrating the NIST CSF into Third-Party Risk Management: Strategies for Enhanced Security and Compliance

InfoSec: Applying AI to Third-Party Risk Management to Achieve Consistency

Tracking and Mitigating Emerging Threats in Third-Party Risk Management

runZero Recognized as a Customers' Choice in 2024 Gartner® Peer Insights™ Report for CAASM

The State of Asset Security: Uncovering Alarming Gaps & Unexpected Exposures

2024 State Of Identity Security in Financial Services

Third-Party Risk: What Are Your Third Parties Not Telling You?

TPRM Privacy Compliance: Questions to Ask When Working with Third Parties

6 Steps to Effective Third-Party Risk Management

Tracking and Mitigating Emerging Threats in Third-Party Risk Management

Close Your Third-Party Risk Vulnerability Gap

DORA Key Provisions and Best Practices

Research Results Report: Securing Your Third-Party Supply Chain Through Security Awareness

Key Metrics to Optimize Your Third-Party Risk Management Program

Around the Network

Top 'Privacy by Design' Considerations for Medical Devices

Oswal: AI, Platformization Key to Network Security Evolution

Eliminating the Need for Stored Credentials in Healthcare

Cyber Insurers Are Intensely Scrutinizing Healthcare Clients

Who Will Take the Lead in Setting Healthcare AI Regulations?

Clinical Considerations When Recovering From Ransomware

Court's Web Tracker Ruling: What HIPAA Entities Should Know

Enhancing Cyber Defense with AI-Powered SOCs

How Mega Attacks Are Spotlighting Critical 3rd-Party Risks

Gaining Better Visibility Into Medical Devices, IoT, OT