92. Vendor Assessment

Vendor Assessment

Process that organizations implement to evaluate the security, reliability, and performance of externa lentities

Entities of Vendor Assessment Focus

Vendors

Suppliers

Managed Service Providers

Vendors

Businesses or individuals that provide goods or services to an organization

Suppliers

Individuals involved in the production and delivery of products or parts of products

Managed Service Providers

Individuals hired by companies to manage IT services on behalf of an organization

Penetration Testing

Simulated cyberattack against the supplier’s system to cehck for exploitable vulnerabilities

Internal Audit

Vendor’s self-assessment where they evaluate their own practices against industry standards or organizational requirements

Independent Assessment

Evaluation conducted by third-party entities that have no stake in the organization’s or vendor’s operations

Supply Chain Analysis

Used to dive deep into a vendor’s entire supply chain and assess the security and reliability of each link