Vendor Incident Response
IT IT Ops
The prompt
Establish procedures for handling vendor security incidents: notification, information gathering, assessment, escalation.
Why this works
Clear procedures enable rapid response to vendor breaches. Vendor notification requirements hold vendors accountable.
Risks & review
Vendors may delay notification. Your org may be liable for vendor breaches.