Is Your Vendor's Cybersecurity Your Weak Link? Avoid the Horror

Podcast Transcript

In this podcast, we’re going to discuss cybersecurity and some of the scary scenarios that can mean your vendor is your weakest link. This is a horror you want to avoid!

Here at Venminder, we understand that cybersecurity is important, so we’ve made it our job to use cybersecurity subject matter experts to assist with analyzing a vendor’s cybersecurity posture for our clients.

Reviewing your vendor’s cybersecurity posture can seem frightening, but if you know what to look for, it’s much less daunting. If you notice any of the following, then your vendor’s cybersecurity may be your weakest link:

1. First, if your vendor isn’t testing their infrastructure, that’s a huge red flag. They should be performing vulnerability testing, penetration testing and social engineering at least annually.

2. Second, your vendor should be securing your data by encrypting it. If they’re not, then you could be even more at risk of exposure if a cybersecurity breach happens.

3. Third, your vendors should be taking special cybersecurity precautions when it comes to their employees, contractors and their own vendors – your fourth parties. Look for processes that show they’ve prepared and trained these groups on cybersecurity awareness. You’ll want to see annual employee information security training, access management policies, hiring practices, background checks and confidentiality agreements all in place.

4. Fourth, if your vendor doesn’t have an incident detection and response plan then that’s a big issue. An incident can impact the confidentiality, integrity and availability of your data or information system.
Remember, if a vendor processes, stores or transmits your organization’s or customer’s data, then they’re a vendor whose cybersecurity posture is one you especially want to keep a close eye on. Don’t let anything slip under the radar. Avoid the horror!

Thanks for tuning in; catch you next time!