I am working on spreading awareness about a robust Technology Vendor Management program. This is an area that lacked focus and is very important for company of any size.
Whether you are a startup or a large organization trying to sell something that involves technology, or whether you are on the purchase side of the table, both parties need to understand the nuances. Why are few things important to a client such as your SOC 2 report, ISO27001 report, why is the client asking for regular governance cadence to discuss SLAs, what is the risk, why are vendor’s security controls important Etc.
I am getting amazing response from people in Technology, Procurement, Third Party Risk Management and Cyber Security for a common place to consume information.
I hope the momentum continues.