Third-party Risk Management: SOC 2s, Security Questionnaires, and Psychosis

No ratings

Presented at BSides SF 2025 by

Condemning “check-box” vendor risk management and security questionnaires is a hot talking point nowadays. This talk will discuss the related but distinct problems in the TPRM space and offer practical, creative solutions to help deliver high-value outcomes via third-party risk management.