Supply Chain Risk Escapes Notice At Many Firms

A panel of legal and information security experts at a Boston forum warned that attacks via suppliers and third-party partners are a major risk for organizations, urging stronger vendor vetting, auditing of partner assets, contractual security appendices, and continuous monitoring of service-provider agreements; speakers noted many breaches originate through third parties and predicted regulators will increasingly mandate such best practices.