Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

Get the Risk Out! How to Manage Third-Party Cyber Risk

Login to download
Get the Risk Out! How to Manage Third-Party Cyber Risk (PDF, 2.86MB)Published: 24 Oct, 2022
Created by:
Dave Shackleford
Dave Shackleford

With third parties firmly in the crosshairs of adversaries, it’s time to focus on the risk they pose. SANS reviews a leading third-party cyber risk management solution: the CyberGRX Exchange.

Meet the expert

Dave Shackleford
Dave Shackleford

Dave Shackleford

Senior Instructor

Cybersecurity leader Dave Shackleford combines decades of enterprise defense, cloud security, and hands-on consulting experience to help students master real-world security operations and modern threat defense.

Read more about Dave Shackleford

Additional resources

macOS Infostealer Exfiltration Techniques via Native Tooling: Behavioral Analysis and Defenses

WhitepaperCyber Defense
  • 22 Jun 2026
  • Cory Findley

Investigating Operating System Variations in IPv6 Implementations

WhitepaperCyber Defense
  • 22 Jun 2026
  • Donovan Rodriguez

USB: Universal Security Breach or Uniquely Secured Bus? Assessing the Effectiveness of Windows 11 Group Policy at Controlling USB Device Installation for Budget-Constrained Security Teams

WhitepaperCyber Defense
  • 22 Jun 2026
  • Kire Jacobson

Risk-Adaptive Data Loss Prevention: Behavioral Intelligence with DLP

WhitepaperCyber Defense
  • 4 Jun 2026
  • Matt Bromiley

Bridging the Gap Between Threat Intelligence and Business Risk

WhitepaperCyber Defense
  • 29 May 2026
  • Kevin Garvey

Data Security Posture Management (DSPM): Modernizing Data Defense

WhitepaperCyber Defense
  • 26 May 2026
  • Kevin Garvey

Related courses

  • Slide 1 of 20

    SEC275: Foundations: Computers, Technology, & Security

    Beginner
    SEC275Cyber Defense
    SEC406: Linux Security for InfoSec Professionals
    • GIAC Foundational Cybersecurity Technologies (GFACT)
    • 38 CPEs / 38 Hours (Self-Paced)
    • Labs: 90 Hands-On Labs

    View course detailsRegister
  • Slide 2 of 20

    SEC503: Network Monitoring and Threat Detection In-Depth

    Intermediate
    SEC503Cyber Defense
    SEC503: Network Monitoring and Threat Detection In-Depth
    • GIAC Certified Intrusion Analyst (GCIA)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 37 Hands-On Labs

    View course detailsRegister
  • Slide 3 of 20

    LDR433: Managing Human Risk

    Beginner
    LDR433Cybersecurity Leadership
    LDR433: Managing Human Risk
    • SANS Security Awareness Professional (SSAP)
    • 3 Days (Instructor-Led)
    • 18 CPEs / 18 Hours (Self-Paced)
    • Labs: 6 Hands-On Labs

    View course detailsRegister
  • Slide 4 of 20

    SEC501: Advanced Security Essentials - Enterprise Defender

    Intermediate
    SEC501Cyber Defense
    SEC501: Advanced Security Essentials - Enterprise Defender
    • GIAC Certified Enterprise Defender (GCED)
    • 6 Days (Instructor-Led)
    • 38 CPEs / 38 Hours (Self-Paced)
    • Labs: 25 Hands-On Labs

    View course detailsRegister
  • Slide 5 of 20

    SEC402: Cybersecurity Writing: Hack the Reader

    UPDATED
    Essentials
    SEC402Cybersecurity Leadership
    SEC403
    • 12 CPEs / 12 Hours (Self-Paced)

    View course detailsRegister
  • Slide 6 of 20

    LDR512: Security Leadership Essentials for Managers

    UPDATED
    Intermediate
    LDR512Cybersecurity Leadership
    LDR512: Security Leadership Essentials for Managers
    • GIAC Security Leadership (GSLC)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 25 Hands-On Labs

    View course detailsRegister
  • Slide 7 of 20

    SEC573: AI-Powered Security Automation: Building Tools with Python, LLMs, and MCP

    MAJOR UPDATES
    AI-FOCUSED
    Advanced
    SEC573Cyber Defense, Artificial Intelligence
    SEC573: Automating Information Security with Python
    • GIAC Python Coder (GPYC)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 128 Hands-On Labs

    View course detailsRegister
  • Slide 8 of 20

    SEC497: Practical Open-Source Intelligence (OSINT)

    Intermediate
    SEC497Cyber Defense
    SEC497: Practical Open-Source Intelligence (OSINT)
    • GIAC Open Source Intelligence (GOSI)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 29 Hands-On Labs

    View course detailsRegister
  • Slide 9 of 20

    LDR551: Building and Leading Security Operations Centers

    Advanced
    LDR551Cybersecurity Leadership
    LDR551: Building and Leading Security Operations Centers
    • GIAC Security Operations Manager (GSOM)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 19 Hands-On Labs

    View course detailsRegister
  • Slide 10 of 20

    LDR519: Cybersecurity Governance, Risk, and Compliance (GRC)

    MAJOR UPDATES
    Advanced
    LDR519Cybersecurity Leadership
    LDR519: Cybersecurity Risk Management and Compliance
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 16 Hands-On Labs

    View course detailsRegister
  • Slide 11 of 20

    LDR516: Strategic Vulnerability and Threat Management

    MAJOR UPDATES
    Advanced
    LDR516Cybersecurity Leadership
    LDR516: Building and Leading Vulnerability Management Programs
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 21 Hands-On Labs

    View course detailsRegister
  • Slide 12 of 20

    SEC450: SOC Analyst Training – Applied Skills for Cyber Defense Operations

    MAJOR UPDATES
    AI SKILLS
    Intermediate
    SEC450Cyber Defense, Artificial Intelligence
    SEC450: Blue Team Fundamentals: Security Operations and Analysis
    • GIAC Security Operations Certified (GSOC)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 22 Hands-On Labs

    View course detailsRegister
  • Slide 13 of 20

    SEC401J: Security Essentials - Network, Endpoint, and Cloud (Japanese)

    Essentials
    SEC401JCyber Defense
    SEC401: Security Essentials - Network, Endpoint, and Cloud
    • GIAC Security Essentials (GSEC)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours
    • Labs: 20 Hands-On Labs

    View course detailsRegister
  • Slide 14 of 20

    SEC587: Advanced Open-Source Intelligence (OSINT) Gathering and Analysis

    AI SKILLS
    Advanced
    SEC587Cyber Defense, Artificial Intelligence
    SEC587
    • GIAC Strategic OSINT Analyst (GSOA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 28 Hands-On Labs

    View course detailsRegister
  • Slide 15 of 20

    SEC366: CIS Implementation Group 1

    NEW
    Essentials
    SEC366Cybersecurity Leadership
    SEC366: CIS Implementation: Group 1
    • 6 CPEs / 6 Hours (Self-Paced)

    View course detailsRegister
  • Slide 16 of 20

    SEC411: AI Security Principles and Practices: GenAI and LLM Defense

    NEW
    AI-FOCUSED
    Intermediate
    SEC411Cyber Defense, Artificial Intelligence
    SEC411
    • 18 CPEs / 18 Hours (Self-Paced)
    • Labs: 5 Hands-On Labs

    View course detailsRegister
  • Slide 17 of 20

    SEC511: Cybersecurity Engineering: Advanced Threat Detection and Monitoring

    Intermediate
    SEC511Cyber Defense
    SEC511: Continuous Monitoring and Security Operations
    • GIAC Continuous Monitoring Certification (GMON)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 18 Hands-On Labs

    View course detailsRegister
  • Slide 18 of 20

    SEC555: Detection Engineering and SIEM Analytics

    Intermediate
    SEC555Cyber Defense
    SEC555: SIEM with Tactical Analytics
    • GIAC Certified Detection Analyst (GCDA)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 18 Hands-On Labs

    View course detailsRegister
  • Slide 19 of 20

    SEC405: Business Finance Essentials

    Essentials
    SEC405Cybersecurity Leadership
    SEC405: Business Finance Essentials
    • 6 CPEs / 6 Hours (Self-Paced)

    View course detailsRegister
  • Slide 20 of 20

    LDR521: Security Culture for Leaders

    MAJOR UPDATES
    Advanced
    LDR521Cybersecurity Leadership
    LDR521: Security Culture for Leaders
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 22 Hands-On Labs

    View course detailsRegister