Should You Secure Your Vendors?

Organisations rely on third parties to operate and scale. Blind reliance introduces risk — and most vendor risk programmes are not built to catch it.

This session moves from awareness to action: why vendor risk matters, what current practice actually looks like, and what real-world breaches through the supply chain reveal about the gaps. It takes a hard look at the limitations of the security questionnaire as the default control, and where it delivers false comfort rather than assurance.

It closes on recommended improvements and the takeaways worth acting on — a case for rethinking how organisations assess and manage vendor relationships in an increasingly interconnected digital landscape.

Ideal for CISOs, third-party risk and procurement owners, GRC teams, and security leaders accountable for supply chain exposure.

Presented by Jan D’Herdt — Enterprise Security Architect & Consultant | SANS Certified Instructor, LDR512 & SEC566