The Third-Party Compliance Handbook: Cybersecurity Frameworks

As more and more data breaches are traced to IT vendors and service providers, regulatory authorities increasingly require organizations to address third-party risks as part of their broader cybersecurity strategies. However, it can be difficult to discern which requirements apply to third parties, let alone what they might mean for your third-party risk management (TPRM) program. Fortunately, we've done the hard work for you.

Download The Third-Party Compliance Handbook: Cybersecurity Frameworks to review specific requirements from 11 different authorities, identify TPRM capabilities that map to each requirement, and uncover best practices for ensuring compliance. Frameworks covered by this 100+ page compendium include:

• CIS Critical Security Controls 15 and 17
• Consensus Assessments Initiative Questionnaire (CAIQ)
• Cybersecurity Maturity Model Certification (CMMC)
• Executive Order on Improving the Nation’s Cybersecurity
• ISO 27001, 27002 & 27036-2
• NCSC Supply Chain Cyber Security Guidance
• NIST SP 800-53, SP 800-161 and CSF
• Payment Card Industry Data Security Standard (PCI DSS)
• SEC Cybersecurity Disclosure Rules
• Standard Information Gathering (SIG) Questionnaire
• System and Organization Control (SOC) 2

This is an ideal reference guide for any IT security, risk or compliance practitioner who needs to ensure that their third-party risk management program is in line with current cybersecurity frameworks. Register here for instant access, and check your level of compliance today!