The analytics vendor risk exception
Security risk and compliance manager at Brackenfield Retail Group
About 80 minutes. Included in Plus.
Marketing wants a fast growing analytics vendor live before Black Friday, and it wants 1.2 million customers' names, emails and card digits. Assess the vendor's evidence, score the risk, design the controls that would make an exception acceptable, and keep the gate shut when the vendor reveals an old incident.
Skills: Assess vendor controls on evidence, not answers; Score third-party risk by a defined method; Design compensating controls that change the risk; Route a risk decision to the right approver; Hold a security gate under commercial pressure