Skip to content
HRM Framework 2.0 , home

I.0359Indicator

Appears in breaches of critical third-party vendors

Vendor incidents include the identity's credentials or PII, expanding indirect paths to enterprise compromise.

Classification

Risk domain One of 9 areas of human risk, from social engineering to readiness and response. Every signal belongs to one.
Dimension Every signal answers one of 3 questions.
Subject Who or what a signal is about: person, AI agent, vendor and organization.
Maturity practices One capability a program performs, scored on its own: See, Understand, Act, Prove, Govern and Culture.
Mappings

Indicators carry no mappings of their own; the signals in the same risk domain do.

Cite this term

"Appears in breaches of critical third-party vendors" (I.0359), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/indicators/i-0359-appears-in-breaches-of-critical-third-party-vendors

Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.

The initial assessment

Find your level.Then fix what matters.

18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.

Suggest a change

What kind of change?

Only if you would like a reply. See the privacy notice.

Feedback
Start the assessment