TPRM Tools for Data Privacy
Is it safe? Almost two years into the pandemic it’s a question that still gets asked a lot. It’s also a question everyone should still regularly ask about their data and how it’s being used. Can you trust that it’s...
Trending in Cybercrime
You thought last year was bad (and the year before, and the year before that), but unfortunately, cybercrime is only likely to get worse in 2022. Worse both in terms of there being more of it, and in the forms...
The Rise of Phishing and Ransomware
Most people start the New Year thinking about ways to make the year come better. Maybe you aim to go for more walks or spend more time meditating. Most of us don’t want to start the year thinking about ways...
Supply Chain Proactiveness
Toyota’s motto, “Let’s Go Places,” suits a company that specializes in reliably getting customers from point A to point B. Thanks to a highly proactive approach to managing supply chain complexity, Toyota has arrived at an impressive place: The company...
Risk Management Job Market: Ongoing Concerns for Business
It’s 2022, and we’re starting off the New Year with problems that feel all too similar to the past. The Omicron variant has many of us feeling déjà vu to the confusion of March 2020 and the fears of past...
Guide To Optimizing Each SIG
The Shared Assessments program never stops putting the Standard Information Gathering (SIG) tools through their paces. This intense, ongoing scrutiny is performed as part of an effort to continually refine the tools to meet the changing needs of Shared Assessments...
Risk Trends For 2022
Some of the most noteworthy third party risk management (TPRM) trends that warrant monitoring in 2022 will sound familiar to TPRM practitioners given that these issues posed formidable challenges in 2021 and will give rise to new challenges this year....
39 Million Impacted By Bangkok Hospital Breach
On January 10 the Bangkok Post reported nearly 39 million health records were reportedly stolen from Bangkok Siriraj Hospital and nearby Siriraj Piyamaharajkarun Hospital. The records were being offered for sale on raidforums.com, “an internet database-sharing forum.” The poster, which...
Professional Development: Realize Your Risk Management Renaissance
American “renaissance man” Benjamin Franklin spoke about risk management professional development centuries ago when he advised that “An investment in knowledge pays the best interest.” CTPRP pays interest: of Certified Third Party Risk Professional (CTPRP) certification holders, 80% report training...
Municipal Ransomware Attacks: Hometown Blues
In my hometown of Los Ranchos, in Bernalillo County, New Mexico, village residents include goats behind crumbling adobe walls and roosters crowing from the top of mobile homes. Riding horseback down the street is not uncommon. But, even the sleepiest of...
Credential Stuffing Attacks: How To Protect Yourself
The New York Office of the Attorney General said this week that it identified and notified 17 well-known online retailers, restaurant chains, and food delivery services that have been the victims of credential stuffing attacks. What Is Credential Stuffing? Credential...
Proactive Governance in the Supply Chain
Answer the following questions as if your company's future depends on it -- because it does: Does your third-party risk management team understand the incremental risks associated with an increasingly complex supply chain? Does your team express that understanding in...