Third party providers are a security risk

Stefan Mileschin · 28th May 2021, 11:30

A third of IT staff worried about them

A third of IT professionals say they are very concerned about the security risks third party providers present to their organisation, according to the latest Twitter poll run by Infosecurity Europe,

More than a quarter admit they have no processes in place to control data and information flow between suppliers, with 20.1 percent having no idea whether any such measures have been implemented.

In addition to the IT professionals who are very concerned about third-party risk, a further 33.9 percent feel somewhat concerned, with a confident 28.1 per cent saying they are not at all concerned. While more than half of respondents have a process in place to control data flow between providers, only 35.1 percent actually enforce this policy.

Infosecurity Europe also asked IT professionals what security prerequisites would be top of the list when preparing to work with a supplier. The number one priority was a full risk assessment (37.9 percent), followed by cyber insurance (24.3 percent), proven compliance (21.7 percent) and national accreditation (16.1 percent).

Recent research from the Ponemon Institute and SecureLink has found that almost half of all organisations have suffered a data breach via a third party in the past 12 months. The risk is likely to rise as businesses along the supply chain adjust to yet another shift in working models, creating new vulnerabilities. In addition, organisations will increasingly turn to third-party providers as they seek to streamline their operations, widening their attack surface.

https://fudzilla.com/news/52934-thir...-security-risk

28th May 2021, 11:30	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,738	Third party providers are a security risk A third of IT staff worried about them A third of IT professionals say they are very concerned about the security risks third party providers present to their organisation, according to the latest Twitter poll run by Infosecurity Europe, More than a quarter admit they have no processes in place to control data and information flow between suppliers, with 20.1 percent having no idea whether any such measures have been implemented. In addition to the IT professionals who are very concerned about third-party risk, a further 33.9 percent feel somewhat concerned, with a confident 28.1 per cent saying they are not at all concerned. While more than half of respondents have a process in place to control data flow between providers, only 35.1 percent actually enforce this policy. Infosecurity Europe also asked IT professionals what security prerequisites would be top of the list when preparing to work with a supplier. The number one priority was a full risk assessment (37.9 percent), followed by cyber insurance (24.3 percent), proven compliance (21.7 percent) and national accreditation (16.1 percent). Recent research from the Ponemon Institute and SecureLink has found that almost half of all organisations have suffered a data breach via a third party in the past 12 months. The risk is likely to rise as businesses along the supply chain adjust to yet another shift in working models, creating new vulnerabilities. In addition, organisations will increasingly turn to third-party providers as they seek to streamline their operations, widening their attack surface. https://fudzilla.com/news/52934-thir...-security-risk

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
iPhone security put Moroccan journalist at risk	Stefan Mileschin	WebNews	0	30th June 2020 07:25
EA patched Origin security flaws that put millions of users at risk	Stefan Mileschin	WebNews	0	27th June 2019 07:33
Security bugs put Apple devices running iOS and Mac OS X at risk	Stefan Mileschin	WebNews	0	25th July 2016 11:01
Security researcher: Globalstar GPS at risk of hackers	Stefan Mileschin	WebNews	0	3rd August 2015 05:53
AVG Security Toolbar Vulnerability Puts IE Users At Risk	Stefan Mileschin	WebNews	0	11th July 2014 07:58
Snowden was a security risk years back	Stefan Mileschin	WebNews	0	15th October 2013 07:08
Android 'master key' discovery raises security risk	Stefan Mileschin	WebNews	0	5th July 2013 06:28
Mozilla pulls day-old Firefox 16 from download site over security risk	jmke	WebNews	1	11th October 2012 13:55
BlackBerrys pose 'security risk' say UAE authorities	Shogun	WebNews	1	29th July 2010 18:17
High risk security flaw found in Office 2007	jmke	WebNews	0	25th February 2007 09:37