Defense contractors must face third-party risk head-on with new cyber-security rules
New, potentially overlooked government-issued cyber-security demands for defense contractors extend into their network of suppliers as of Dec. 31.
Related articles
-
ArticleUnderstanding NIST’s new Risk Management Framework
NIST’s new Risk Management Framework—used with the agency’s Cybersecurity Framework—offers companies direction in integrating cyber-security, privacy, and supply-chain risk management.
-
SurveyCW survey finds compliance teams struggling to scale due diligence beyond direct vendors
Companies are tightening oversight of third-party risks but still struggle to extend due diligence beyond their direct partners, according to a new survey by Compliance Week and GAN Integrity.
-
OpinionWrite supply chain resilience into the contract
The only thing constant is change. Shouldn’t we be ready for that in our contracts?