Vendor Security Alliance questionnaire: Starting a security discussion with vendors
The interconnection between major organizations and their many service providers is providing a successful, and often ignored, path through which attackers are penetrating large well-protected targets such as the Office of Personnel Management and Target. In both of these examples, the breaches were enabled through an earlier successful breach of one or more of their divisions or suppliers. While partners and vendors are an important part of the technology and service ecosystem, their security postures … More → Continue reading Vendor Security Alliance questionnaire: Starting a security discussion with vendors