When you share data with third-party vendors, how is this access tracked and how do you monitor this access?

Security & GRCSecurity Operations Center (SOC)
741 viewscircle icon3 Comments
Sort by:
Director in Software5 years ago

NDA's, contractual agreements, MSA, InfoSec agreements, Tech controls

CIO, Senior VP in Finance (non-banking)5 years ago

We are prevented from doing this by Policy. Makes it easier to say no. p.s., I wrote the policy.

Lightbulb on1
ISSO and Director of the IRU in Healthcare and Biotech5 years ago

We have third party agreements and we also use data use agreements

Content you might like

If your company has an established information security program, which framework is the program based on for controls?

NIST CSF24%

ISO 2700166%

CIS Controls (Centers for Internet Security)35%

NIST SP 800-5319%

Other3%

View Results

Why do you think there are so few mature AI-driven autonomous pentesting solutions on the market, and why does this topic seem to generate more hype than in-depth technical discussion?

Read More Comments

Which tech conference do you intend to attend in person next year or have already participated in this year, and what motivated your choice?

Read More Comments

How do you deal with a mismatch of risk appetites with the board? What are some ways to increase, or temper, the board’s risk appetite if necessary?

Read More Comments

In your experience, what roles are best positioned to act as executive sponsors for AI governance?

Chief Data/Analytics Officer28%

Chief Executive Officer18%

Chief Information Officer 46%

Chief Risk Officer18%

Chief Technology Officer29%

Chief Compliance Officer18%

Chief Operating Officer11%

Chief Human Resources Officer9%

General Counsel or Chief Legal Officer16%

Other (please share in the comments)3%

None

View Results