... Cybersecurity leaders are constantly looking for ways to enhance their third-party cyber risk management program but often lack a clear view of how mature or effective their current practices are. This toolkit provides a structured self-assessment to gauge your current state and identify improvement ...
Analyst(s): Christine Lee | Rahul Balakrishnan
Get more from Gartner
Interested in receiving proven business and technology insights, analyst guidance, benchmarks, diagnostics and more? Connect with a Gartner representative to learn more about becoming a Gartner client.
... Cyber risk quantification often stalls not because of math, but because of myths. Cybersecurity leaders can overcome misconceptions, like “we don’t have enough data” or “it’s too complicated” by using ranges, sanity checks, and business impact context to deliver clear, credible insights. Gartner Research ...
... Access Insights Already a Gartner client? Cybersecurity leaders demand structured, defensible cyber-risk decisions. This template replaces legacy heatmaps with actionable scenarios, evidence-based control posture, and risk appetite alignment without requiring complex quantification models. When to Use ...
... The Third-Party Cyber Risk Management (TPCRM) Pickup Team will discuss challenges and approaches to understanding and maintaining their organization’s third-party cyber risk. Members will have the opportunity to share challenges, solutions and lessons learned with their peers. Session Description Gartner ...
... Access Insights Already a Gartner client? AI brings novel incident response challenges like model poisoning, prompt injection, and autonomy failure. For this, CISOs must prepare teams, engage new stakeholders, and show leadership how incident response planning must adapt to the risks AI introduces. Ins ...
Analyst(s): Craig Porter | Carlos De Sola Caraballo
... Access Insights Already a Gartner client? Project Glasswing, which leverages Anthropic’s Mythos preview to find vulnerabilities, presents both threats and opportunities for CISOs with CPS environments. As findings are made public, CISOs must move fast to address risks that cannot be easily remediated. ...
... risk and maintain cybersecurity in the AI age As AI, cloud and emerging quantum threats expand the attack surface, vendor risk, technical debt and data protection demand enterprisewide vigilance. Every cyber investment must tie to business outcomes, requiring CIOs to master security economics, preempt risk ...
... awareness tactics, causing efforts to reduce cyber risk exposure to fail. Progressive cybersecurity leaders must shift to security behavior and culture programs to address the specific ‘break’ in defenses caused by unmanaged employee use and GenAI-augmented attacks that make detection increasingly difficult ...
... and isolated silos expose organizations to an unmonitored IAM attack surface. IAM leaders can strengthen security across centralized and decentralized environments using visibility, observability, and remediation to reduce the identity attack surface, improving their overall security posture. Overview ...