Virtual Cyber & Technology Risk Management Forum

• Perform a Vendor Risk Assessment o Always start with the risk assessment! • Determine vendor classification • The more important/risky the vendor, the more you do to mitigate risk • Make the #1 decision: do we want to keep doing business with this vendor? o If yes – great! Move along. o If no – or if there’s more risk than you want – then what? Much of the Same as Selection

© 2020 SBS CyberSecurity, LLC www.sbscyber.com

29