Understanding Vendor-Related or Third-Party Cyber Risk

This document explains third-party cyber risk and its implications for organizations, describing common risk categories (data breaches, malware injection, supply chain vulnerabilities, and compliance failures) with illustrative examples such as Target, SolarWinds, Kaseya, and Uber. It outlines best practices for vendor assessment and due diligence, highlights supporting technologies (vendor risk platforms, SIEM, rating services, security awareness training), and promotes CloudSEK’s SVigil for monitoring issues like exposed APIs, leaked credentials, sensitive data exposure, mobile app risks, malware detection, and misconfigurations.