Cybersecurity and Third-Party Risk (Paperback)

Gregory C. Rasner

ISBN 10: 111980955X / ISBN 13: 9781119809555

Published by John Wiley & Sons Inc, New York, 2021

About this Item

Paperback. Move beyond the checklist and fully protect yourself from third-party cybersecurity risk Over the last decade, there have been hundreds of big-name organizations in every sector that have experienced a public breach due to a vendor. While the media tends to focus on high-profile breaches like those that hit Target in 2013 and Equifax in 2017, 2020 has ushered in a huge wave of cybersecurity attacks, a near 800% increase in cyberattack activity as millions of workers shifted to working remotely in the wake of a global pandemic. The 2020 SolarWinds supply-chain attack illustrates that lasting impact of this dramatic increase in cyberattacks. Using a technique known as Advanced Persistent Threat (APT), a sophisticated hacker leveraged APT to steal information from multiple organizations from Microsoft to the Department of Homeland Security not by attacking targets directly, but by attacking a trusted partner or vendor. In addition to exposing third-party risk vulnerabilities for other hackers to exploit, the damage from this one attack alone will continue for years, and there are no signs that cyber breaches are slowing. Cybersecurity and Third-Party Risk delivers proven, active, and predictive risk reduction strategies and tactics designed to keep you and your organization safe. Cybersecurity and IT expert and author Gregory Rasner shows you how to transform third-party risk from an exercise in checklist completion to a proactive and effective process of risk mitigation. Understand the basics of third-party risk managementConduct due diligence on third parties connected to your networkKeep your data and sensitive information current and reliableIncorporate third-party data requirements for offshoring, fourth-party hosting, and data security arrangements into your vendor contractsLearn valuable lessons from devasting breaches suffered by other companies like Home Depot, GM, and Equifax The time to talk cybersecurity with your data partners is now. Cybersecurity and Third-Party Risk is a must-read resource for business leaders and security professionals looking for a practical roadmap to avoiding the massive reputational and financial losses that come with third-party security breaches. Shipping may be from multiple locations in the US or from the UK, depending on stock availability.

Seller Inventory # 9781119809555

Bibliographic Details

• Title: Cybersecurity and Third-Party Risk (Paperback)
• Publisher: John Wiley & Sons Inc, New York
• Publication Date: 2021
• Language: English
• ISBN 10: 111980955X
• ISBN 13: 9781119809555
• Binding: Paperback
• Condition: new

About this title

Synopsis

The secret is out: If you want to attain protected data as a hacker, you do not attack a big company or organization that likely has good security. You go after a third party that more likely does not. Companies have created the equivalent of how to deter car thieves: Ensure that your car looks difficult enough to break into so that thieves move onto the automobile with its doors unlocked and keys in the ignition. When a burglar sees a car with a car alarm, they know that they can look and eventually find a target that isn't so well protected. Exploiting the weakest link is not new. A bank robber could go to the bank to steal money, but a softer target would likely be the courier service as they bring the money into and out of the bank.

• Learn what the risk is and how to assess the cyber risk
• Step-by-step guide on how to create a cyber-risk third-party risk management program without having to be a cyber or risk management expert
• Create a mature cyber-focused third-party risk management program that is predictive and less reactive
• Learn how to secure your data in a vendor's cloud and how to secure your software supply chain.

About the Author

GREGORY C. RASNER is the lead of Cyber Third-Party Risk at Truist Financial Corporation. He has extensive experience in cybersecurity and technology leadership in banking, biotech, software, telecom, and manufacturing. He is the author of several published articles on Third Party Risk and is a sought-after keynote speaker in this area.