Page 60 - Cyber Defense eMagazine RSAC Special Edition 2025
P. 60
The Essential Guide to Third-Party Risk
Management (TPRM)
Protecting Organizations in an Outsourced World
By Dasha Davies, President/CISO, Stealth-ISS Group Inc.
The expanding use of digital and cloud-based services alongside outsourcing trends makes Third-Party
Risk Management (TPRM) essential for maintaining organizational security in today’s business
world. Organizations’ systems, networks, and sensitive data are exposed to potential access by vendors,
suppliers, contractors, and service providers through direct and indirect means. Alarming cybersecurity
incidents and hefty regulatory fines have underscored a sobering reality: Organizational security threats
predominantly emerge from third-party relationships rather than internal company vulnerabilities.
60