Third Party Risk Insights July 2020

Most Companies Conduct Inherent Risk Assessments on Less Than 40% of Their Vendors

In DVV Solutions partner ProcessUnity’s guest blog, they reveal the outcomes and discussions from a recent IT GRC webinar with leading CISOs and Third Party risk executives. While any third-party risk management professional would be quick to say that they perform inherent risk assessments to determine the level of due diligence for a vendor, the survey revealed that two-thirds of companies are actually scoring less than half of their vendors. Read the Guest Blog.

Survey finds 1 in 2 companies unable to cope with remote work security risks

Half of infosec professionals in a recent Bitdefender study revealed that their organization doesn’t have a contingency plan in place, or didn’t know if they did, for a situation like COVID-19 or a similar scenario.

86% of respondents in our study, conducted by Sapio Research, admitted that attacks were on the rise during the pandemic, with phishing and whaling recording the biggest spike among the common attack vectors – a finding echoed in other recent studies. Read the full article.

Financial Crime Risks: What A Vendor Manager Must Know About Sanctions and Money Laundering

Shared Assessments’ Continuous Monitoring Working Group recently convened to examine the risks from financial crime that a vendor manager must understand. Ken Wolckenhauer, head of vendor due diligence and review for the New York branch of Finland-based Nordea Bank, led the discussion around this serious topic. Wolckenhauer’s insights from his career experiences illuminated key considerations to integrate into vendor risk assessments.

This blogpost describes what a vendor manager needs to know about sanctions and money laundering, offering resources for the management of this risk.