Konrad Fellmann: Trust Is Not Enough. You Have to Verify
Konrad Fellmann, Cubic,Chief Information Security Officer Vendor questionnaires about security practices should require written explanations of securitypractices so that you can make judgements about whether the people responding to thosequestions actually know what...
Arvin Verma: Vendor Risk Assessments Must Be Actionable
Arvin Verma, Various Fortune 500, for and not for profit organizations, Cybersecurity Thought Leader inVendor/Supply Chain Risk Design customized questionnaires so that vendors’ answers map directly back to their capabilities and certifications. These documentshelp...
Alex Golbin: Continuous Monitoring Is Central to Effective Risk Management
Alex Golbin, IHS Markit, Global Head of Risk Assessments Effective supply chain risk management depends on a complete vendor inventory, with a risk rating methodology to identify an inherent risk profile for every single relationship. It requires having a risk...
Steven Parker: The Growing Challenge of Managing Supply Chain Risk
Steven Parker, TBC Corporation, Chief Information Security Officer Once a vendor is brought on board and the business relationship begins, there must be periodic reviews of that vendor, there mustbe continuous monitoring of its public-facing IT infrastructure. There...
Lakshmi Hanspal: Supply Chain Relationships Are Strategic to the Business
Lakshmi Hanspal, Box, Global Chief Information Security Officer Vendor evaluation typically involves many stakeholders, including the business owner trying to bring a third party into the environment, procurement or sourcing, legal,security or the trust office, and...
Keith Donnelly: Look at the Weakest Links in the Supply Chain
Keith Donnelly, Fintech Solutions Provider, Vice President, Global Head of Risk & Compliance Vendor cyber risk evaluation must include a basic security scan using a security tool that identifies the vulnerabilities of assets visible onthe public internet and rates...
Deneen DeFiore: Move from Risk Assessment to Dynamic Risk Management
Deneen DeFiore, United Airlines, Vice President & Chief Information Security Officer All vendors should be categorized based on the services they provide and their criticality to the company, and then assessed on their ability to fulfill operational and security...
Jeanne Meister: Employee Experience Is a Cross-Functional Project
Transforming employee experience begins with a business problem. If you don’t start with a business problem, the concept of employee experience becomes too abstract and broad. Work to make it easy for employees to have a seamless and personalized employee experience...
Prof. Sally Eaves: Successful Transformation Requires IT-Business Alignment
Transforming employee experience requires a deep look into what the employee experience actually is. Companies spend a lot of time talking about transforming customer experience. They need to spend time personalizing the employee experience, too. A good employee...
Ross Young: Adapt to Employee Needs in Ways That Meet Business Needs
Competition for talent and skills makes good people hard to find. Being flexible about where they work makes it possible for businesses to find the right talent at the right prices. The keys to successful transformation of employee experience include documenting all...
