Third-Party Risk Management Stories

Global Stories

Third-Party Risk Management stories

Synack expands CREST pathways with two new certifications

Security buyers get a stronger benchmark as CREST-certified testers gain faster access to Synack's vetted red team for client engagements.

By Sean Mitchell • 4 min read • Today

Privileged Access Management

DrillDocs tightens access control for offshore teams

Personal-device access to production systems prompted DrillDocs to tighten oversight of offshore engineers and contractors across time zones.

By Mark Tarre • 4 min read • Last week

Supply Chain

Factor launches supply chain detection & response platform

Growing supplier cyber risk is pushing businesses towards continuous monitoring, as Factor joins a crowded market focused on better response.

By Sean Mitchell • 4 min read • Last week

Partner Programmes

Black Kite expands EMEA footprint with new UK operations hub

The move gives the cyber risk provider closer access to EMEA customers as demand rises for better oversight of supplier vulnerabilities.

By Sean Mitchell • 4 min read • Last week

Data Protection

GuidePoint launches supply chain detection & response

Security teams can now fold supplier risk alerts into incident response as GuidePoint's new service targets breaches from third-party tools.

By Mark Tarre • 4 min read • Last month

Data Protection

Exclusive: Reco COO on securing the AI inside your SaaS stack

Reco COO Zoe Hillenmeyer says enterprises typically underestimate their AI agent exposure by a factor of ten and that gap is widening.

By Jake MacAndrew • 4 min read • Last month

Data Protection

MODLR wins BSI security certification for its platform

The certification should ease procurement concerns for finance teams handling sensitive planning data, as buyers demand tougher proof of security controls.

By Sofiah Nichole Salivio • 3 min read • Last month

Security Operations Centres

Black Kite says 58 CVEs pose critical supply threat

Only a small fraction of disclosed flaws are likely to hit suppliers, leaving security teams to focus on the 58 highest-risk CVEs.

By Sean Mitchell • 5 min read • Last month

Data Protection

Experian & ServiceNow partner on agentic AI workflows

The tie-up could help regulated firms move AI agents from pilots to live workflows, using trusted data for checks, approvals and governance.

By Mark Tarre • 4 min read • Last month

Data Protection

BlueVoyant partners ODEON Cinemas Group on security

Threat alerts have fallen by 98% for Europe's largest cinema operator after it overhauled security across eight countries.

By Mark Tarre • 3 min read • Last month

Data Protection

Strike Graph launches Trust Chain for supplier risk

Vendor assessments could be completed faster and with less manual chasing as the new tool verifies evidence rather than self-reported answers.

By Sofiah Nichole Salivio • 4 min read • Last month

Unified Communications

IFT launches Fortitude compliance checks for regulated firms

Recurring checks aim to help regulated firms spot compliance gaps in outsourced and in-house operations before breaches trigger penalties.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Unified Communications

BlueVoyant names John Hernandez as Chief Executive Officer

Pressure to simplify fragmented security tools is driving BlueVoyant’s leadership shake-up as John Hernandez takes over as Chief Executive Officer.

By Sofiah Nichole Salivio • 4 min read • Last month

Stories from Other Regions

Third-Party Risk Management stories

Ransomware

Factor launches supply chain detection & response platform

Attackers targeting weaker suppliers are pushing enterprises to move from periodic reviews to continuous monitoring and response across vendor networks.

By Sofiah Nichole Salivio • 4 min read • Last week