Third-Party Risk Management

Vendor risk scoring assigns vendors a single risk score– typically a number or letter grade– to facilitate comparison between vendors and portfolios.

Defense in depth is a cyber security strategy that uses a series of layered, redundant defensive measures to protect sensitive data, PII and other assets.

Learn the 6 key steps to create effective vendor security assessment questionnaires in 2019, so you can better manage your vendor risk exposure.

This is a complete guide to third-party risk management in 2023. Learn how to reduce third-party and fourth-party risk with this in-depth post.

This is a complete overview of the Consensus Assessments Initiative Questionnaire (CAIQ). Learn how to use the CAIQ in this in-depth post.

Looking for a BitSight alternative? We look at the key differences between BitSight and UpGuard.

Your vendors need to follow stringent cybersecurity practices to protect you from cyberattacks. Learn the correct vendor due diligence process.

Supply chain attacks are on the rise but their attempts could be detected with Honeytokens. Learn how to implement them into your cybersecurity.

Supply chain attacks are on the rise. Follow these prevention tips to avoid falling victim to these devastating breaches.

Learn about UpGuard's new custom questionnaire builder for vendor risk assessments.

Learn why supply chain risk management is important and how to expertly manage supply chain security risks