Vendor and Third-Party Risk

Your cybersecurity exposure includes companies that host your data, connect to your systems, maintain your equipment and provide cloud services.

Full guide planned · 14 min read

Start here

If you read one thing on this subject, read this.

Official resourceCISA

Secure by Demand Guide

What to ask software vendors about security before you buy.

Why it matters

Turns vendor security from a leap of faith into a set of procurement questions.

Go deeper

This is a reading list, not a guide

Everything above was published by someone else, and is here because it is the clearest treatment of the subject we could find and verify. The Hub’s own guide to this topic is still being written. If you know a better source than the ones listed, that is worth telling us before it is.

Send a note