Episode 40: Third-Party Risk Identification and Evaluation

05/07/2025 11 min Episodio 40
Episode 40: Third-Party Risk Identification and Evaluation

Listen "Episode 40: Third-Party Risk Identification and Evaluation"

Episode Synopsis


Many IT risks arise from third-party relationships, and this episode explores how to evaluate them properly. You’ll learn how to assess vendors, cloud providers, and outsourced service risks—including contract terms, SLAs, and due diligence activities. This topic has gained importance in recent years and is a growing area of focus on the CRISC exam, particularly in risk treatment scenarios. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

More episodes of the podcast Certified: The CRISC Audio Course