Verkauf durch Sack Fachmedien

Malone

Third Party Risk Management

Techniques and Strategies to Protect Your Business

Medium: Buch
ISBN: 978-0-7494-8353-1
Verlag: Kogan Page
Erscheinungstermin: 30.09.2019
vorbestellbar, Erscheinungstermin ca. September 2019
Global third party ecosystems are now an important source of competitive advantage for businesses, but with advances in technology and an increasing reliance on vendors, organizations expose themselves to new risks. Ignorance is no excuse; failure to properly assess these third party risks can result in operational and reputational damage, fall in market value or even huge fines from regulators. Third Party Risk Management is a practical, step-by-step guide to building a comprehensive third party risk management programme, from creating a full vendor inventory, risk ranking, onsite visits, audit requirements, and reporting the results.

Third Party Risk Management also covers the strategic considerations of successfully communicating a new programme, including corporate risk appetite, alignment with business goals, and the importance of executive management support. With expert advice on software-aided third party assessments, continuous monitoring, cyber threats, and other recent challenges and innovations, this book is essential reading to manage and minimize third party risk in any organization.

Produkteigenschaften


  • Artikelnummer: 9780749483531
  • Medium: Buch
  • ISBN: 978-0-7494-8353-1
  • Verlag: Kogan Page
  • Erscheinungstermin: 30.09.2019
  • Sprache(n): Englisch
  • Auflage: 1. Auflage 2019
  • Produktform: Kartoniert
  • Seiten: 288
  • Format (B x H): 156 x 234 mm
  • Ausgabetyp: Kein, Unbekannt

Autoren/Hrsg.

Autoren

Malone, Shawn H.

Shawn H. Malone is Founder and CEO of Security Diligence, LLC (Reading, USA) a consulting and advisory services company focused on Cybersecurity and Third Party Risk. A technology and business executive with three decades of experience in business security and technology risk, Mr. Malone has developed third party security risk programs within the Financial Services and Insurance industries. As a longtime supporter of the Shared Assessments Program, he led the development and release of the industry leading Certified Third Party Risk Professional (CTPRP) designation. He holds the CISSP, CIPP/US and CTPRP certifications.

Section - ONE: Current Practices in Third Party Risk Management; Chapter - 01: Defining Third Party Risk Management; Chapter - 02: Alignment with Business Goals and Corporate Risk Appetite; Chapter - 03: The Importance of Executive Management Support; Chapter - 04: Program Strategy and Governance; Chapter - 05: Components of a Formal Third Party Risk Oversight Program; Chapter - 06: The Shared Assessments Program - a Framework for Third Party Risk Management; Section - TWO: Building and Executing a Program that Works; Chapter - 07: Program Component Definition and Development; Chapter - 08: Third Party Discovery and Inventory; Chapter - 09: Risk Ranking and Oversight Prioritization; Chapter - 10: Preparing Third Parties for the Assessment/Oversight Process; Chapter - 11: Gathering Third Party Security Program Information; Chapter - 12: Pre-onsite Analysis and Planning; Chapter - 13: The Onsite Visit; Chapter - 14: Post-onsite Evaluation and Findings; Chapter - 15: Reporting the Results; Chapter - 16: Remediation Closeout and Re-assessments; Chapter - 17: Audit Requirements and Records Management; Section - THREE: New Tactics, Techniques and Procedures in Third Party Risk; Chapter - 18: Recent Challenges In Third Party Risk; Chapter - 19: The Continual Push of New Innovation and Technology; Chapter - 20: The Cyber Threat Environment and Third Parties; Chapter - 21: Software-aided Third Party Assessments; Chapter - 22: Improving the Point in Time Assessment Cycle; Chapter - 23: Ongoing Monitoring, Continuous Monitoring and Real-Time, Event Driven Applications; Chapter - 24: The Promise of Artificial Intelligence and Machine Learning; Chapter - 25: The Case for Tightly Coupled Outsourcer/Third Party Ecosystems;