Alyned Thinking

Vendor governance is gaining a lot of attention as one of the top drivers for cyber risk to organisations and a very significant contributor to overall operational risk - especially if you are a financial institution.

Risk Assessments are already widely used and accepted as a method for risk identification and assurance and can be an extremely powerful and cost effective tool when done right and an utterly useless tool if done wrong.

Are you spending too much time on vendor governance without meaningful results to show for it? Are you stuck figuring out if you are asking the right questions in your self assessments?