Supply Chain Risk Management: Managing Third Party and External Dependency Risk

Published: March 26, 2015, 5 p.m.

b'One caveat of outsourcing is that you can outsource business functions, but you cannot outsource the risk and responsibility to a third party. These must be borne by the organization that asks the population to trust they will do the right thing with their data.In this podcast, Matt Butkovic, the Technical Manager of CERT\\u2019s Cybersecurity Assurance Team, and John Haller, a member of Matt\\u2019s team, discuss approaches for more effectively managing supply chain risks, focusing on risks arising from "external entities that provide, sustain, or operate Information and Communications Technology (ICT) to support your organization." This is sometimes referred to as third party or external dependency risk.\\xa0 Listen on Apple Podcasts.'