Critical Supplier Identification and Tiering Methodology
At 12:09 a.m. Eastern on July 19, 2024, a faulty CrowdStrike Falcon update began … Read more
Chris Ekai
SaaS Vendor Risk Assessment: Cloud-Specific Evaluation
On August 20, 2025, Salesloft and Salesforce revoked every live OAuth token for the … Read more
Supply Chain Risk Heat Map: How to Build and Maintain One
At 1:29 a.m. on March 26, 2024, the container ship Dali lost power and … Read more
Concentration Risk in Third-Party Relationships: Assessment Guide
At 04:09 UTC on July 19, 2024, CrowdStrike pushed a defective Falcon sensor update … Read more
Fourth-Party Risk Management: Assessing Your Vendors’ Vendors
In June 2023, the California Public Employees’ Retirement System told roughly 769,000 members that … Read more
Greenwashing Risk Assessment: How to Audit ESG Claims
In September 2024, Australia’s Federal Court ordered Vanguard Investments Australia to pay a record … Read more
NYDFS Cybersecurity Regulation AI Amendment: What 23 NYCRR 500 Now Requires for AI Risk Management
On May 21, 2026, the New York Department of Financial Services issued two warnings … Read more
PESTLE vs PESTEL vs STEEPLE: Which to Use
On March 10, 2023, California regulators seized Silicon Valley Bank, the second-largest bank failure … Read more
NIST Supply Chain Risk Management: A C-SCRM Guide to SP 800-161
In December 2020, the security firm FireEye traced its own breach to an unlikely … Read more
Business Continuity Maturity Model: How to Score and Level Up Your BCM Program
On the morning of July 19, 2024, CrowdStrike pushed a faulty update to its … Read more
Physical Security Risk Management: A Step-by-Step Guide
On the night of December 3, 2022, gunfire disabled two Duke Energy substations about … Read more
NIST CSF Risk Assessment: How to Run One Under CSF 2.0
On February 21, 2024, UnitedHealth Group detected ransomware inside Change Healthcare, the clearinghouse that … Read more