article thumbnail

Spooky, Scary Tales of Vendor Management

SecureWorld News

Five little vendors access your data. The first one said, "For this company, vendor management doesn't seem to matta." The fourth one said, "Regulation requires vendor control." In honor of Halloween, it seems appropriate to address one of the scariest issues facing organizations today: vendor or supplier management.

article thumbnail

CISA Urges Critical Infrastructure Operators to Protect Supply Chains

SecureWorld News

Every security and IT program has to begin with accurate inventory (i.e. The Cybersecurity Supply Chain Risk Management Practices outlined by CSRC/NIST can be part of a comprehensive third-party risk management program." Once that is done identifying riskier devices becomes easier.

article thumbnail

Key considerations to cancer institute’s gen AI deployment

CIO Business Intelligence

The governance group developed a training program for employees who wanted to use gen AI, and created privacy and security policies. While on-prem, open-source LLMs were considered, they’d require significant investment in infrastructure and might not offer the same level of versatility as commercial models like GPT-4,” he says.