Organizations depend on many third parties: cloud providers, software vendors, managed service providers, payment processors, contractors and suppliers. Each one can introduce risk, because a vendor's weakness can become your breach. Many major incidents have started at a supplier, such as a compromised software update or a managed service provider's remote access tool. Third-party risk management (also called vendor risk management) is the process of assessing, contracting with, monitoring and eventually offboarding vendors so that their risks stay within your appetite. Security+ tests the agreement types and the assessment methods used.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.