Blog Posts

soc, outsource, vendor, cybersecurity, defense Christian Grupp soc, outsource, vendor, cybersecurity, defense Christian Grupp

Do I need an outsourced SOC (Security Operations Center)?

When it comes to cybersecurity, one of the most important decisions a company can make is whether or not to outsource their Security Operations Center (SOC). An SOC is responsible for monitoring and analyzing a company's security systems to identify and respond to potential threats. While some companies choose to handle their SOC in-house, others opt to outsource this critical function to a third-party provider. There are pros and cons to both options, and ultimately, the decision of whether or not to outsource an SOC will depend on the unique needs and circumstances of your organization.

Read More

How do I select someone to do vulnerability assessments?

When it comes to selecting a vendor to perform vulnerability assessments, there are a few key factors to consider. First and foremost, it's important to understand the difference between a vulnerability assessment and a penetration test. A vulnerability assessment is a non-intrusive evaluation of your organization's systems, networks, and applications to identify and assess any vulnerabilities that could be exploited by an attacker. A penetration test, on the other hand, is a simulated attack on your systems, networks, and applications to test the effectiveness of your security controls.

Read More

What is a sample vendor due diligence process and checklist?

Vendor due diligence is a critical process for any business, regardless of size or industry. It involves thoroughly reviewing and evaluating a potential vendor or third-party partner before entering into a business relationship with them. This process is essential for ensuring that the vendor can meet the organization's needs while also maintaining the security and integrity of sensitive data. In this blog post, we will go over a sample vendor due diligence process and checklist that can be used to evaluate potential vendors.

Read More

What are some practical steps in vendor due diligence?

Vendor due diligence is a crucial process for any organization looking to establish a working relationship with a third-party vendor. It involves thoroughly evaluating a vendor's security practices, policies, and overall trustworthiness to ensure that they align with your organization's cybersecurity standards and expectations.

Read More
cybersecurity, vendor Christian Grupp cybersecurity, vendor Christian Grupp

Do I need to review a vendor's cybersecurity?

As a business owner, it's important to ensure that the vendors you work with have adequate cybersecurity measures in place. This is because vendors, especially those with access to sensitive information, can act as a potential point of entry for cyber criminals. In this blog post, we will discuss the importance of reviewing a vendor's cybersecurity and the steps you can take to ensure that your vendors are secure.

Read More