Would you consider conducting due diligence on vendor’s vendor (4th party vendor to you) as part of your vendor risk management program?

Yes, if the services are in scope41%

Yes, irrespective of scope of agreement25%

May be19%

No11%

Not sure1%

561 PARTICIPANTS
22.8k viewscircle icon13 Upvotes

Content you might like

Yes87%

No12%

AI-driven threats (deepfakes, automated attacks) 18%

Software supply chain risks 18%

Insider risk (both malicious & accidental) 11%

Regulatory compliance 9%

Cloud misconfigurations 12%

Shadow IT (or shadow AI) 12%

Ransomware 7%

Talent shortage in cybersecurity9%

Something else (comment to explain)3%

View Results