Supplier Risk: Throw Out the Old Playbook!
summary
CDW replaced a bulky post-Solargate supplier self-assessment questionnaire with a streamlined, threat-focused Supplier Risk program that reduces friction, improves assessor skills, and increases assessment volume. The presenters describe concrete process changes and share the specific questions CDW uses so organizations can adopt the same focused approach.
AI-written summary · about
chapters (4)
- 0:00Start
- 20:03Do you use a CMDB to maintain asset information including criticality levels?
- 29:41Do all employees and contractors receive annual security awareness training?
- 34:37backup capabilities for systems supporting services to our organization?
related talks
36mSupplier Risk Where OSS Collides With Vendor Management
35mEffective Handling of Third-Party Supplier Incidents
27mThird-party Risk Management: SOC 2s, Security Questionnaires...
48mStop Drowning in Lake Assurance: Supply Chain Security and a New Frontier
51mThe Overlooked Security Risk: 3rd Party Risk Management
08mMaximizing Security and Compliance through Digital Third Party Risk Management
30mManaging Software Supply Chain Risks in a Large Organization
44mSoftware development and vulnerability management to secure the supply chain