Are Third-Party Vendors Your Biggest Cybersecurity Risk?

Fred Kneip, CEO of CyberGRX, chats with Chris Sienko about the security risks for companies that work with third-party vendors — those both globally focused and those closer to home.

This video covers these questions and more:

- How did you get started in computers and security? (1:30)
- What are some of the primary security concerns that global, trans-continental companies should be looking out for? (2:45)
- What are some of the most common attack vectors being leveraged in these third-party vendor breaches? (5:05)
- What mistakes are companies making when it comes to third-party vendors? (9:05)
- How do you convince your supervisors or those in the C-suite that they need take additional steps to strengthen supply chain security? (14:10)
- Can you explain the recent story about the Chinese military inserting a spying chip into equipment to infiltrate U.S. supply chains? (16:45)
- What steps should global companies be putting in place to reduce this type of risk? (20:40)
- Could these remedies be scaled down to smaller organizations? (23:20)
- If you had the power to enact legislation to prevent or minimize these types of attacks, what would you propose? (25:40)
- Tell us about your company CyberGRX. (27:40)
- Where do you see the next wave of cybercrime coming from? (29:35)

Want to hear more conversations like these? Subscribe to CyberSpeak with InfoSec Institute:

MORE ON INFOSEC INSTITUTE
InfoSec Institute fortifies organizations and their employees against security threats with award-winning security and privacy education. Recognizing cybersecurity is everyone’s job, we provide skills development and certification training for IT and security professionals while building the entire workforce’s security aptitude with awareness training and phishing simulations. Recognized as a Gartner Peer Insights Customers’ Choice for Security Awareness Computer-Based Training, InfoSec Institute is also a Training Industry “Top 20 IT Training Company” and the Security Training & Education Program Gold Winner in Info Security Products Guide’s Global Excellence Awards.

Additional information can be found here:

[moclarke]

Great conversation, information provided allowed me to step outside the zones and look at plausible countermeasures.

[oliviathompson]

Maybe it's worth making a more updated video considering recent events?