Term used
Your working draft
panorays.com/blog/the-top-5-third-party-cyber-gaps-of-2018/#1 desktop
panorays.com/blog/the-top-5-third-party-cyber-gaps-of-2018/#1 desktop
l.panorays.com/top-5-vendor-cyber-gaps/#2 desktop
l.panorays.com/top-5-vendor-cyber-gaps/#2 desktop
www.globenewswire.com/news-release/2021/04/27/2217887/0/en/Panorays-Research-Finds-Top-Supply-Chain-Cyber-Gap-is-Inadequately-Protected-Web-Assets.html#2 mobile
www.esecurityplanet.com/products/third-party-risk-management/#3 desktop
www.esecurityplanet.com/products/third-party-risk-management/#3 desktop
www.helpnetsecurity.com/2020/11/25/combating-third-party-cyber-risk/#3 mobile
www.helpnetsecurity.com/2020/11/25/combating-third-party-cyber-risk/#3 mobile
www.thirdpartytrust.com/blog/vendor-risk-management-trends-2022/#4 desktop
www.thirdpartytrust.com/blog/vendor-risk-management-trends-2022/#4 desktop
www.cybersecuritydive.com/news/third-party-risk-cyber/598704/#5 desktop
www.cybersecuritydive.com/news/third-party-risk-cyber/598704/#5 desktop
www.chubb.com/vn-en/articles/10-common-gaps-in-cyber-security.html#5 mobile
www.mckinsey.com/business-functions/risk-and-resilience/our-insights/enterprise-cybersecurity-aligning-third-parties-and-supply-chains#7 mobile
blog.rsisecurity.com/top-threats-that-require-third-party-risk-management/#9 desktop
blog.rsisecurity.com/top-threats-that-require-third-party-risk-management/#9 desktop
www.mdpi.com/2079-9292/10/10/1168/pdf#9 mobile
www.eci.com/blog/16253-top-cyber-gaps-in-2021-and-how-to-avoid-them.html#10 desktop
www.eci.com/blog/16253-top-cyber-gaps-in-2021-and-how-to-avoid-them.html#10 desktop
www.google.com/amp/s/www.forbes.com/sites/forbesbusinesscouncil/2021/08/24/cyber-threats-and-third-party-management-a-risky-business/amp/#10 mobile
www.google.com/amp/s/blog.rsisecurity.com/top-threats-that-require-third-party-risk-management/amp/#11 mobile
www.google.com/amp/s/blog.rsisecurity.com/top-threats-that-require-third-party-risk-management/amp/#11 mobile
www.cybergrx.com/resources/research-and-insights/blog/really-managing-third-party-risk#12 desktop
www.cybergrx.com/resources/research-and-insights/blog/really-managing-third-party-risk#12 desktop
www.google.com/amp/s/blog.rsisecurity.com/top-challenges-to-implementing-third-party-risk-management/amp/#12 mobile
www.google.com/amp/s/blog.rsisecurity.com/top-challenges-to-implementing-third-party-risk-management/amp/#12 mobile
www.navexglobal.com/blog/article/third-party-risk-management-monitor-cyber-risk/#13 desktop
www.navexglobal.com/blog/article/third-party-risk-management-monitor-cyber-risk/#13 desktop
www.cohnreznick.com/insights/protect-your-data-with-third-party-risk-management#13 mobile
www.cohnreznick.com/insights/protect-your-data-with-third-party-risk-management#13 mobile
www.securitymagazine.com/articles/96664-third-party-security-the-missing-piece-in-the-cybersecurity-puzzle#14 desktop
www.securitymagazine.com/articles/96664-third-party-security-the-missing-piece-in-the-cybersecurity-puzzle#14 desktop
www2.deloitte.com/content/dam/Deloitte/no/Documents/risk/Current%20trends%20in%20outsourcing%20and%20addressing%20third%20party%20risk.pdf#15 mobile
www.bitsight.com/blog/third-party-services#16 desktop
csrc.nist.gov/CSRC/media/Projects/Supply-Chain-Risk-Management/documents/briefings/Workshop-Brief-on-Cyber-Supply-Chain-Best-Practices.pdf#16 mobile
www.kroll.com/en/services/cyber-risk/governance-advisory/third-party-cyber-risk-management#17 desktop
www.google.com/amp/s/www.navexglobal.com/blog/amp/article/third-party-risk-management-monitor-cyber-risk/#17 mobile
www.google.com/amp/s/www.navexglobal.com/blog/amp/article/third-party-risk-management-monitor-cyber-risk/#17 mobile
www.upguard.com/blog/manage-third-party-risk#18 desktop
www.upguard.com/blog/manage-third-party-risk#18 desktop
www.gartner.com/reviews/market/it-vendor-risk-management#19 mobile
www.gartner.com/reviews/market/it-vendor-risk-management#19 mobile
www.komodosec.com/third-party-risk-management#20 desktop
www.komodosec.com/third-party-risk-management#20 desktop
www.servicenow.com/lpwbr/what-to-do-about-third-party-risk-and-cyber-exposure.html#20 mobile
www.servicenow.com/lpwbr/what-to-do-about-third-party-risk-and-cyber-exposure.html#20 mobile
sharedassessments.org/blog/types-of-third-party-risk/#21 desktop
sharedassessments.org/blog/types-of-third-party-risk/#21 desktop
www.mastercard.us/en-us/business/large-enterprise/safety-security/cyber-solutions/risk-recon.html#21 mobile
www.mastercard.us/en-us/business/large-enterprise/safety-security/cyber-solutions/risk-recon.html#21 mobile
www.safe.security/safe/third-party/#22 desktop
www.safe.security/safe/third-party/#22 desktop
www.google.com/amp/s/www.techtarget.com/searchsecurity/feature/Third-party-risk-management-Horror-stories-You-are-not-alone%3Famp=1#22 mobile
www.pwc.com/us/en/services/consulting/cybersecurity-risk-regulatory/library/digital-trust-leadership-operations-partnership/trust-in-third-parties.html#23 mobile
www.pwc.com/us/en/services/consulting/cybersecurity-risk-regulatory/library/digital-trust-leadership-operations-partnership/trust-in-third-parties.html#23 mobile
www.cylumena.com/insights/third-party-risk-management/#24 desktop
www.cylumena.com/insights/third-party-risk-management/#24 desktop
www.complianceweek.com/topics/third-party-risk#25 desktop
www.complianceweek.com/topics/third-party-risk#25 desktop
www.ey.com/en_us/consulting/questions-to-expose-gaps-in-company-cyber-resiliency#25 mobile
www.ey.com/en_us/consulting/questions-to-expose-gaps-in-company-cyber-resiliency#25 mobile
www.ajg.com/us/insurance/cyber-liability-insurance/#26 desktop
www.ajg.com/us/insurance/cyber-liability-insurance/#26 desktop
www.aon.com/2021-cyber-security-risk-report/#27 mobile
www.aon.com/2021-cyber-security-risk-report/#27 mobile
www.forbes.com/sites/forbesbusinesscouncil/2021/08/24/cyber-threats-and-third-party-management-a-risky-business/#29 desktop
www.forbes.com/sites/forbesbusinesscouncil/2021/08/24/cyber-threats-and-third-party-management-a-risky-business/#29 desktop
cybersecurity
H
Typical: 3–9 (13)
vulnerabilities
H
Typical: 1–3 (5)
third-party risk management
H
Typical: 2–6 (2)
supply chain
H
Typical: 3–7 (3)
cyberattacks
Typical: 1–3 (3)
data breaches
Typical: 1–3 (2)
ransomware
Typical: 1–2 (1)
third-party security
Typical: 1–3 (2)
due diligence
Typical: 1–3 (1)
questionnaires
H
Typical: 1–3 (2)
third-party cyber risk
Typical: 1–2 (1)
security controls
Typical: 1–2 (2)
third-party vendors
Typical: 1–3 (1)
continuous monitoring
Typical: 1–3 (1)
information security
Typical: 1–2 (2)
tprm
Typical: 3–7 (1)
certifications
Typical: 1–2 (4)
risk assessment
Typical: 2–4 (2)
automation
Typical: 1–2 (2)
gdpr
Typical: 1–3 (5)
third-party risk management program
Typical: 1–2 (1)
cybersecurity risk
Typical: 2–4 (2)
service providers
Typical: 1–2 (2)
healthcare
H
Typical: 1–2 (2)
authentication
Typical: 1–2 (1)
patching
Typical: 1–2 (2)
security posture
Typical: 2–4 (2)
business partners
Typical: 1–2 (2)
security ratings
Typical: 1–3 (1)
ecosystem
Typical: 1–3 (1)
managing third-party risk
Typical: 1–3 (2)
third-party relationships
Typical: 1–3 (1)
metrics
Typical: 1–2 (1)
attack surface
Typical: 1–2 (2)
data privacy
Typical: 1–3 (1)
solarwinds
Typical: 1–3 (1)
panorays
Typical: 3–7
supply chain risk
Typical: 1–2 (1)
security team
Typical: 1–3 (1)
vendor risk management
Typical: 2–4 (2)
cyber risk management
Typical: 2–4 (2)
frameworks
Typical: 1–3 (2)
security incidents
Typical: 1–2 (2)
fourth parties
Typical: 1–2 (1)
onboarding
Typical: 1–2 (1)
ponemon
Typical: 1–2
pandemic
Typical: 1–2 (1)
nist
Typical: 1–3 (1)
real-time
Typical: 1–2 (1)
security program
Typical: 1–2 (1)