Blog

SASC Chairs

Shared Assessments Steering Committee Chair and Vice Chair 2020

by Sabine Zimmer | January 15, 2020 | News And Events, Shared Assessments

Shared Assessments strives to be the trusted source for thought leadership, best practices and solutions for third party risk with opportunities for members to address global risk management challenges through committees, awareness groups, interest groups and special projects.  The Shared Assessmen ....

SA Trends Resolutions

10 Trends and 7 Resolutions in Third Party Risk for 2020

by Sabine Zimmer | January 10, 2020 | Third Party Risk Management

In 2019, data privacy dominated third party risk management (TPRM) activities, thanks to the European Union’s (EU’s) General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). Data privacy concerns will continue to top TPRM priorities in 2020, but those lists will be o ....

IT OT

2020 OT Risk Perspective: IT-OT Athletes Are Rare

by Sabine Zimmer | January 4, 2020 | Industry Verticals, Operational Technology (OT)

Three decades ago, Nike’s iconic “Bo Knows” campaign featured TV commercials of teammates marveling at Bo Jackson’s incredibly rare skill set. He was the first modern professional athlete to play on Major League Baseball and the National Football League teams in the same year. The advertisin ....

Operational Technology Risk Management Requires Collaboration

by Sabine Zimmer | January 2, 2020 | Industry Verticals, Operational Technology (OT), Third Party Risk Management

[et_pb_section admin_label="section"] [et_pb_row admin_label="row"] [et_pb_column type="4_4"] [et_pb_text admin_label="Text"] In late November, The Wall Street Journal ran an exposé on cyberattacks that have struck more than a dozen utilities that operate near critical infrastructure ....

SA pigs rats 2

2020 Fraud Perspective: Pigs, Rats and Ransomware

by Sabine Zimmer | December 18, 2019 | Cybersecurity, Data & Cybersecurity, Fraud

Before Santa Fe Group Senior Advisor Bob Jones shares his insights on 2020 fraud trends, he points out that 2019 is the Year of the Pig. “It’s also the year of ransomware,” adds Jones, who expects ransomware attacks, phishing attacks and other forms of fraudulent activities to continue to hog ....

Shared Assessments Best Practices Guide and New Visual Tools Help Practitioners Demonstrate TPRM Program Value

by Sabine Zimmer | December 16, 2019 | Best Practices, Tools & Templates

Third party risk management practitioners today work in an environment rife with conflicting demands. Mounting pressure for speedy vendor onboarding is occurring in an environment that is facing escalating regulatory requirements, even in industries where in the past regulations have been minimally ....

SIM Swap

SIM Swap Scams + Consumerization = TPRM Risk

by Sabine Zimmer | December 12, 2019 | Data & Cybersecurity, Hacking

SIM swap scams can be extremely expensive to individual consumers -- one investor lost more than $23.8 million worth of cryptocurrency to a SIM card hijacking in 2018. These hacks also represent a growing third party risk as the use of cell phones and related consumer technologies continue to increa ....

This is Your Career on CTPRP .... Any Questions?

by Laura Waller | October 2, 2019 | Certification, Certified Third Party Risk Professional (CTPRP), Education and Training, Risk Professionals

In the late ‘80s, the Partnership for a Drug-Free America ran an advertising campaign with a simple and powerful message. In one of the televised spots, a man cracks an egg (your brain) into a hot skillet (drugs) where it sizzles (your brain on drugs). If we created a public service announcemen ....

Enhancing Third Party Provider Risk Management Through Aligning the Contracting, Security and Diligence Functions

by Eric Hess | September 30, 2019 | Contracts, Third Party Risk Management

As the founder of a law firm and two cybersecurity firms, my clients often reach out to me to manage technology contracts that have cybersecurity and privacy implications. My clients span the small with minimal processes to larger firms with Chief Information Security Officers (CISO’s), a separate ....

The Value of Virtual Assessments

by Sabine Zimmer | September 11, 2019 | Third Party Risk Management, Vendor Assessment, Virtual Assessment

A risk-based determination of whether - and how - to conduct remote assessments of vendors Expert Contributors:  Angela Dogan and Andrew Hout Given how much time and money virtual assessment of vendors can save companies and their third party risk management programs, it may be surprising to ....

« Previous PageNext Page »