The United States remains the most breached country on earth, and it’s also the most expensive place in the world to suffer a breach. That combination is why a US-focused view of the largest incidents matters more than a global… Read More "Biggest Data Breaches in US History (Updated July 2026)"
How to Create a Vendor Onboarding Policy
Last updated September 22, 2026 We still see vendors reaching production systems before anyone assigns a risk tier, and that’s where intake fails. A vendor onboarding policy is the intake document that keeps a new supplier away from your systems… Read More "How to Create a Vendor Onboarding Policy"
What to Do When a Vendor Fails a Security Audit
Last updated September 23, 2026 The audit report lands, and one of your vendors failed. The finding sits in their environment, but the exposure sits in yours. You own the data they hold, the processes they run, and the regulatory… Read More "What to Do When a Vendor Fails a Security Audit"
What is Vendor Due Diligence?
Last updated September 23, 2026 Granting a vendor access before you have verified evidence is how weak controls enter your environment. Vendor due diligence is how you evaluate a prospective supplier’s security controls, compliance posture, and data-handling practices before the… Read More "What is Vendor Due Diligence?"
Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier
Citrix NetScaler administrators scrambled over the weekend to protect their appliances after exploitation of a new zero-day vulnerability began. Administrators initially reported reboots of fully patched NetScaler systems on Friday, and Citrix soon confirmed the existence of another zero-day exploited… Read More "Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier"
Ongoing TPRM Success: Continuous Security Monitoring with AI
All security professionals know third-party risk management doesn’t stop after one risk assessment. That ongoing work is the TPRM program, not a one-time assessment. What about the next vendor? Or the future risks the vendors you’ve already evaluated will inevitably… Read More "Ongoing TPRM Success: Continuous Security Monitoring with AI"
We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found.
TL;DR: We researched four AI evidence-parsing tools against four criteria security teams often overlook. None nailed all four. Here’s what they got right, where they fell short, and what to ask before trusting one with a real vendor decision. Analyzing… Read More "We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found."
11 Vendor Security Questionnaires for IT Vendor Assessment (2026)
Every vendor you onboard seems to include a different questionnaire request. Each framework claims to finally capture third-party risk, yet the options overlap and rarely make the choice clear. Send the wrong one, and you either overwhelm a low-risk supplier… Read More "11 Vendor Security Questionnaires for IT Vendor Assessment (2026)"
Vendor Risk Assessment Matrix Template: How to Build and Use One
UpGuard found that 28% of the top 100 vendors most commonly used by universities have experienced a data breach since 2024. Being widely adopted isn’t the same thing as being safe, so every vendor still needs review. That gets harder… Read More "Vendor Risk Assessment Matrix Template: How to Build and Use One"
Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force
President Donald Trump on Sunday tapped Jay Clayton, his director of national intelligence, to lead a new government task force on artificial intelligence. Trump is calling it the “Super Intelligence Force,” because he has tried to rebrand AI as “super… Read More "Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force"