Risk Management for Cyber Security Managers - Steps to Implement TPCRM

The video tutorial outlines the steps for implementing Third Party Cyber Risk Management (TPCRM). It begins with identifying all vendors, focusing on those with access to important data. The next step involves evaluating inherent risk, which is faster than assessing residual risk. Once vendors are classified by inherent risk, residual risk is assessed using questionnaires, considering compliance standards. The tutorial introduces a website offering free templates for these assessments. Finally, it discusses assigning risk ratings and continuously monitoring high-risk vendors.

What new insight or understanding did you gain from this video?