Financial Firms Grapple With Cyber Risk in the Supply Chain – The CIO Report – WSJ.

Our clients are seeing significantly increased attention to supply chain issues. And it’s not limited to security. BCP, privacy and other areas are receiving significant attention.

How much attention?

Enough attention that we’ve built a practice offering around it. We now help firms put in place stopgap measures after receiving findings (e.g., MRA’s), whether it be redesigning a client’s vendor management program, or sending our teams to assess vendors.

It’s not just financial services, however. The Target breach highlighted the need for all organizations to review their vendor management programs to reduce the risk of 3rd parties introducing vulnerabilities into the supply chain.