In this episode of Socializing Security, Brian and Milou delve into the critical topic of third-party vendor management, focusing on the importance of vendor reviews, risk assessments, and the processes involved in onboarding and managing vendors. They discuss the need for a coordinated approach among various departments, the significance of standardized evaluation processes, and the unique challenges posed by smaller vendors and AI technologies. The conversation emphasizes the necessity of documentation, contractual obligations, and ongoing vendor management to ensure compliance and security.
Chapters
00:00 Introduction to Third Party Vendor Management
01:24 Understanding Third Party Vendor Reviews
05:26 The Importance of Risk Assessment
08:31 Standardized Evaluation Processes
12:53 Navigating Smaller Vendors
16:57 Balancing Non-Negotiables and Flexibility
19:25 Documenting the Evaluation Process
22:06 Contractual Obligations and Risk Acceptance
24:05 Ongoing Vendor Management
26:04 Special Considerations for AI Vendors
No comments yet. Be the first to say something!