Reinforcing the Supply Chain

The video discusses the importance of zero trust in IT security, emphasizing the need for cautious vendor relationships. It highlights challenges in vendor contracts, especially regarding liability and security obligations. Strategies for better contract negotiation and post-contract policing are explored. The video also covers supply chain risk management and the role of third-party testing. Audience questions address practical aspects of vendor security and contract management.

Why is it important to never give absolute trust to a vendor?

What is the concept of 'zero trust' in cybersecurity?

How can organizations ensure they are protected against supply chain threats?

What should a CISO expect from a tech company that has been hacked?

How can organizations effectively conduct due diligence on potential vendors?

What are some key considerations when drafting contracts with vendors?

What role does post-contract policing play in vendor management?

What are the implications of a vendor disclaiming all liability for security breaches?

In what ways can organizations prepare for potential cybersecurity incidents?

What are the benefits of independent assessments of vendor security practices?