How to manage third party risk

An often overlooked aspect of securing your business is how you deal with
third party vendors. As part of your business you may need to share
information, software or access to your computer network with other
businesses and this creates a potential security risk. Any information that
you share with a third party vendor is still your responsibility. If they
have a data breach, you have a data breach and you will be responsible for
notifying your customers and regulators, the same as if your company was
the one that was hacked. Also, hackers can use the connections between
different companies as a means to pivot from one company to another.