An organization experiences a significant data breach. During the incident response review, it is discovered that a key third-party vendor had access to the affected database for service purposes. Which third-party risk management control would have MOST helped prevent or detect this breach?

Question

Accepted Answer

B. Vendor access monitoring and vendor risk assessments with contractual security requirements. Third-party risk management requires vendor risk assessments to evaluate the security practices of vendors with access to sensitive data, contractual security requirements (such as minimum security controls), and ongoing monitoring of vendor access. These controls ensure vendors who access organizational systems meet security standards and that their access is visible and logged.

An organization experiences a significant data breach. During the incident response review, it is discovered that a key third-party vendor had access to the affected database for service purposes. Which third-party risk management control would have MOST helped prevent or detect this breach?

Related Questions

Discussion