Third-Party InfoSec Vendor Risk Assessment - Show and Tell Walkthrough

Cybersecurity Third-Party Risk Management (TPRM) is a growing and thriving profession as firms continue to outsource business processes including application development, recruitment, IT & customer service helpdesks, payroll etc. to external third-party vendors.
A failure to conduct thorough due diligence before onboarding a vendor or continually monitor the vendor once on-board, could pose a risk to a firm’s operations.
This workshop takes us through a sample third-party questionnaire to assist Cyber-Risk professionals to provide internal business stakeholders with an expert opinion of the risks of a third-party’s information security processes, policies and practices.
A copy of the questionnaire is available to load on the Ladder Back Down's website.
ladderbackdown.com/sample-thi...

[@maamegyamfua6444]

Amazing and practical

[@chris5871]

Awesome 👌 Brilliant

[@alexchuks149]

This is very informative. It really demystified the TPRM due diligence process with clear examples and details.

[@theladderbackdown]

Many thanks @Alex

[@inerit5175]

very useful information! Thank you!

[@hapexconsulting3789]

Thanks for sharing! God bless you.

[@mehdikootiarab1549]

Great presentation. Very informative and practical.
Many thanks for sharing it.
I just wonder how the weighting under column 'D' in the Chart has been calculated and also how we have to get to a total scoring in order to simplify understanding understanding the overall score and make it easier for the other departments in reaching a decision on selecting the third-party service provider.

[@yogeshchaudhary5870]

Thank you so much...

[@ayofam9278]

This is great content! Thanks for sharing. Are you able to share the questions and the chart templates you used?

[@theladderbackdown]

ladderbackdown.com/sample-third-party-cyber-risk-self-assessment-questionnaire/

[@theladderbackdown]

For everyone asking for a copy of the questionnaire, please view the post on the Ladder Back Down's website and download a copy of the questionnaire therein. ladderbackdown.com/sample-third-party-cyber-risk-self-assessment-questionnaire/