Skip to Content

​Assessing Third-party Technology Risks

Online Exclusives Gregory D. Nixon, PMP Feb 18, 2021

Organizations need a methodology to assess the IT defenses of their vendors and business partners.

Facebook suffered two separate data breaches in 2019 that were traced to third-party companies that lacked sufficient controls to protect authentication credentials, Wired reports. One third party left 540 million access credentials exposed on a publicly accessible server, and a second company did not protect 22,000 user IDs and passwords.

Find your local chapter.

You are attempting to access subscriber-restricted content.

Are You Ready to Experience Everything Internal Auditor (Ia) Has to Offer? Sign in or become a member to gain access to the latest internal audit news and information today.


Gregory D. Nixon, PMP

Gregory D. Nixon is a senior information security architect at Flagstar Bank in Troy, MI.