HRM-GOV-13Term
Third-party risk
The risk that a vendor, partner or their software exposes the organization. It is a sibling discipline; the taxonomy keeps the person-side signals, such as vendor-exposed people and risky OAuth grants, in the Web, cloud and SaaS domain.
Example
A vendor risk manager hears that a supplier was breached and asks the program which people hold accounts there.
Sources
1Related terms
3"Third-party risk" (HRM-GOV-13), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/third-party-risk
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.